nginx centos build only supports SSLv3 and ignores ssl_protocols

mayak mayak at australsat.com
Wed Oct 1 14:39:10 UTC 2014


On 10/01/2014 02:33 PM, mex wrote:
> this probably depends on the underlaying openssl-version from your os.
> what does 'openssl version' says?
>
> if you want nginx with newer openssl-version you can build a custom nginx
> witth
> openssl statically linked
>
> https://www.mare-system.de/guide-to-nginx-ssl-spdy-hsts/#workaround-for-outdated-openssl-versions
>
>
>
> regards,
>
> mex
>
hi mex,

thanks for your note -- i totally forgot to give specifics:

- CentOS 6.5, x64, totally up2date
- OpenSSL 1.0.1e-fips 11 Feb 2013
- nginx-1.6.2-1.el6.ngx.x86_64 (from nginx repo)
- openssl-1.0.1e-16.el6_5.15.x86_64
- openssl-devel-1.0.1e-16.el6_5.15.x86_64

i did rebuild your src rpm on my machine, and it sill wont support any TLS versions ...

thanks

m



More information about the nginx mailing list