Help

[Dmitry Volyntsev]

On 17.09.2023 11:28, Revvy wrote:
>
> $ uname -a
> Linux toronto-srv-03 6.1.0-12-amd64 #1 SMP PREEMPT_DYNAMIC Debian 
> 6.1.52-1 (2023-09-07) x86_64 GNU/Linux
>
> $ lsb_release -a
> No LSB modules are available.
> Distributor ID: Debian
> Description:    Debian GNU/Linux 12 (bookworm)
> Release:        12
> Codename:       bookworm
>
> $ /sbin/nginx -V
> nginx version: nginx/1.24.0
> built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
> built with OpenSSL 1.1.1n  15 Mar 2022
> TLS SNI support enabled
> configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx 
> --modules-path=/usr/lib/nginx/modules 
> --conf-path=/etc/nginx/nginx.conf 
> --error-log-path=/var/log/nginx/error.log 
> --http-log-path=/var/log/nginx/access.log 
> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock 
> --http-client-body-temp-path=/var/cache/nginx/client_temp 
> --http-proxy-temp-path=/var/cache/nginx/proxy_temp 
> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp 
> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp 
> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx 
> --group=nginx --with-compat --with-file-aio --with-threads 
> --with-http_addition_module --with-http_auth_request_module 
> --with-http_dav_module --with-http_flv_module 
> --with-http_gunzip_module --with-http_gzip_static_module 
> --with-http_mp4_module --with-http_random_index_module 
> --with-http_realip_module --with-http_secure_link_module 
> --with-http_slice_module --with-http_ssl_module 
> --with-http_stub_status_module --with-http_sub_module 
> --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream 
> --with-stream_realip_module --with-stream_ssl_module 
> --with-stream_ssl_preread_module --with-cc-opt='-g -O2 
> -ffile-prefix-map=/data/builder/debuild/nginx-1.24.0/debian/debuild-base/nginx-1.24.0=. 
> -fstack-protector-strong -Wformat -Werror=format-security 
> -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now 
> -Wl,--as-needed -pie'
>
> $ openssl version
> OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
>
> I think I see the problem now. I am using Debian /bookworm/ and the 
> official nginx repos for Debian /bookworm/.
>
> $ cat /etc/apt/sources.list.d/nginx.list
> deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg] 
> http://nginx.org/packages/debian bookworm nginx
>
> That version is built with OpenSSL 1.1.1n and the updated Debian 
> bookworm version is OpenSSL 3.0.9. Is that the problem?
>
>
Yes, this looks like the reason for a problem .


> Another thing I should have mentioned is this issue only popped up 
> after I upgraded the nginx-module-njs and nginx packages, the same 
> configuration was working fine before.
>
>
Can you, please, share the current version of njs packet  and the 
version you used before?


> On 9/17/23 12:28, Dmitry Volyntsev wrote:
>>
>> On 17.09.2023 06:39, Revvy via nginx wrote:
>>> Sep 17 13:36:52 toronto-srv-03 nginx[127394]: nginx: [emerg] 
>>> dlopen() "/etc/nginx/modules/ngx_http_js_module.so" failed 
>>> (/etc/nginx/modules/ngx_http_js_module.so: undefined symbol: 
>>> EVP_PKEY_CTX_set1_hkdf_salt) in /etc/nginx/nginx.conf:4
>>>
>>>
>>
>> Hi Revvy,
>>
>> Can you please share your operation system details (name, version) 
>> and the output of the following command: nginx -V. Also, I would like 
>> to know the OpenSSL library you are using.
>>