Nginx with OpenSSL 1.1.1n

Eric Germann ekgermann at
Sun Mar 27 14:37:11 UTC 2022

Compile yourself. I do that and can build it with any OpenSSL version I like. 

Why?  Centos 6 doesn’t update the packages anymore and I’m too lazy to rebuild a reverse proxy. 


> On Mar 27, 2022, at 10:00, Sergey A. Osokin <osa at> wrote:
> Hi,
>> On Sun, Mar 27, 2022 at 02:04:10AM -0400, sukeerthiadiga wrote:
>> The Mainline version of Nginx i.e 1.12.6 has the OpenSSL version 1.1.1m and
>> it is vulnerable.
> That's a bit far from true.  NGINX, as many other products, depends on other
> open source software components, like openssl, pcre, zlib.  Library of those
> components are supported by an operating system vendor.  I'd recommend
> to contact to the vendor of a corresponding OS to get an update of a
> component.
>> Is there any plan to release another version of Nginx with the latest
>> OpenSSL(i.e 1.1.1n)?
> I don't think that such plans are available.
> -- 
> Sergey A. Osokin
> _______________________________________________
> nginx mailing list -- nginx at
> To unsubscribe send an email to nginx-leave at

More information about the nginx mailing list