Socket leaks., pread and [crit] SSL_Write() in 1.0.14

[Samael]

No need to - it will be statically compiled. Just drop the "make
%{?_smp_mflags}" part for just "make" - otherwise not going to work with
OpenSSL 1.0.1 due to a bug. And you will be able to use EC EDH - a lot
better than just Ephemeral Diffie-Hellman (if you need Perfect Forward
Secrecy, of course); most of the browsers already support it.

'--with-openssl=/usr/src/redhat/SOURCES/openssl-1.0.1
--with-openssl-opt=enable-ec_nistp_64_gcc_128 --with-cc=/usr/bin/gcc44'
will do the job for a 64bit build. Just make sure you are using gcc44
(export CC=/usr/bin/gcc44).

Posted at Nginx Forum: http://forum.nginx.org/read.php?2,224381,224427#msg-224427