Boringssl + Nginx 1.8.7

Hi,

I am trying to compile boringssl against nginx.
I’ve got an error while compiling:

export NGINX_VERSION 1.7.8
export MODULESDIR /usr/src/nginx-modules
export NPS_VERSION 1.9.32.2

I run ./configure:
./configure
–prefix=/etc/nginx
–sbin-path=/usr/sbin/nginx
–conf-path=/etc/nginx/nginx.conf
–error-log-path=/var/log/nginx/error.log
–http-log-path=/var/log/nginx/access.log
–pid-path=/var/run/nginx.pid
–lock-path=/var/run/nginx.lock
–with-http_realip_module
–with-http_addition_module
–with-http_sub_module
–with-http_dav_module
–with-http_flv_module
–with-http_mp4_module
–with-http_gunzip_module
–with-http_gzip_static_module
–with-http_random_index_module
–with-http_secure_link_module
–with-http_stub_status_module
–with-file-aio
–with-ipv6
–with-http_ssl_module
–with-http_spdy_module
–with-cc-opt="-I …/boringssl/.openssl/include/ -g -O2
-fstack-protector --param=ssp-buffer-size=4 -Wformat -Wformat-security
-Werror=format-security -Wp,-D_FORTIFY_SOURCE=2"
–with-ld-opt="-L …/boringssl/.openssl/lib -Wl,-Bsymbolic-functions
-Wl,-z,relro -Wl,–as-needed"
–add-module=${MODULESDIR}/ngx_pagespeed-release-${NPS_VERSION}-beta
–add-module=${MODULESDIR}/ngx_http_enhanced_memcached_module
–add-module=${MODULESDIR}/headers-more-nginx-module

The error which I get is
src/event/ngx_event_openssl.c: In function ‘ngx_ssl_handshake’:
src/event/ngx_event_openssl.c:1090:46: error:
‘SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS’ undeclared (first use in this
function)
c->ssl->connection->s3->flags |=
SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS;
^

src/event/ngx_event_openssl.c:1090:46: note: each undeclared identifier
is reported only once for each function it appears in
make[1]: *** [objs/src/event/ngx_event_openssl.o] Error 1
make[1]: Leaving directory `/usr/src/nginx-1.7.8’

What do I do wrong?

Hi,

I am trying to compile boringssl against nginx.
I’ve got an error while compiling:

This is due to:
https://boringssl.googlesource.com/boringssl/+/e319a2f73a30147ae118190397a558b8a2a24733^!/

Can you try the attached patch against nginx which
safeguards SSL3_FLAGS_NO_RENEGOTIATE_CIPHERS?

Lukas

Works thanks