Centos 6.5 and ECDH ciphers in nginx.org Centos repo

Jeffrey Walton noloader at gmail.com
Mon Jan 6 10:07:09 UTC 2014


On Sun, Jan 5, 2014 at 10:56 PM, Nick Jenkin <nick at thenile.com.au> wrote:
> Hi
>
> In Centos 6.5 (and RHEL 6.5) the ECDH ciphers were enabled. There appears to be an issue with the nginx.org 1.5.8 Centos binaries still not having support for ECDHE despite having updated openssl 1.01e with elliptic curves.
>
> If I compile from source, ECDH works fine. Is there something wrong with the centos binaries?
>
http://unix.stackexchange.com/questions/84283/how-can-i-get-tlsv1-2-support-in-apache-on-rhel6-centos-sl6

Though the question is about Apache, it specifically calls out nginx
as needing a recompile on the platform after updating from OpenSSL
1.0.0 to OpenSSL 1.0.1 due to static linking.

Jeff



More information about the nginx mailing list