Compiling CentALT Nginx v1.1.4 with OpenSSL v1.0.0d

This is a refresh of the information from

• Compiling EPEL Nginx
• Nginx with TLS SNI Extensions

The Nginx v1.1.4 source rpm from CentALT was used to compile against OpenSSL v1.0.0.d from Fedora 15. The OpenSSL rpm was built without modification. The Nginx spec file got an epoch setting to try to reduce the likelihood of a newer RPM without TLS SNI support being eligible as an 'upgrade'.

Files

A copy of the source and binary RPM's are:

• nginx-1.1.4-1.RHL5.src.rpm
• nginx-1.1.4-1.RHL5.x86_64.rpm
• nginx-debuginfo-1.1.4-1.RHL5.x86_64.rpm
• openssl-1.0.0d-1.RHL5.src.rpm
• openssl-1.0.0d-1.RHL5.x86_64.rpm
• openssl-debuginfo-1.0.0d-1.RHL5.x86_64.rpm
• openssl-devel-1.0.0d-1.RHL5.x86_64.rpm
• openssl-perl-1.0.0d-1.RHL5.x86_64.rpm
• openssl-static-1.0.0d-1.RHL5.x86_64.rpm

Nginx Version Information

The important part to note is the inclusion of the message ' TLS SNI support enabled'.

# nginx -V
nginx: nginx version: nginx/1.1.4
nginx: built by gcc 4.1.2 20080704 (Red Hat 4.1.2-51)
nginx: TLS SNI support enabled
nginx: configure arguments: --user=nginx --group=nginx 
  --prefix=/usr/share/nginx --sbin-path=/usr/sbin/nginx
  --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log
  --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/tmp/client_body
  --http-proxy-temp-path=/var/lib/nginx/tmp/proxy --http-fastcgi-temp-path=/var/lib/nginx/tmp/fastcgi
  --pid-path=/var/run/nginx.pid --lock-path=/var/lock/subsys/nginx --with-http_secure_link_module 
  --with-http_random_index_module --with-http_ssl_module --with-http_realip_module 
  --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module
  --with-http_gzip_static_module --with-http_stub_status_module --with-http_perl_module
  --with-http_geoip_module --with-http_mp4_module --with-mail --with-mail_ssl_module 
  --with-cc-opt='-O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector
  --param=ssp-buffer-size=4 -m64 -mtune=generic' --with-ipv6 --with-file-aio 
  --add-module=/home/greg/rpmbuild/BUILD/nginx-1.1.4/nginx-upstream-fair 
  --add-module=/home/greg/rpmbuild/BUILD/nginx-1.1.4/nginx-upload-progress-module 
  --add-module=/home/greg/rpmbuild/BUILD/nginx-1.1.4/mod_zip-1.1.6 
  --add-module=/home/greg/rpmbuild/BUILD/nginx-1.1.4/nginx_upload_module-2.2.0 
  --add-module=/home/greg/rpmbuild/BUILD/nginx-1.1.4/ngx_http_auth_pam_module-1.2

Links

• openssl-1.0.0d-1.fc15.src.rpm
• nginx-1.1.4-1.el5.src.rpm