make -f objs/Makefile make[1]: entrant dans le répertoire «
/root/nginx/nginx-1.4.3 » cc -c -pipe -O -W -Wall -Wpointer-arith
-Wno-unused-parameter -Werror -g -I/root/nginx/nginx-rtmp-module/ -I
src/core -I src/event -I src/event/modules -I src/os/unix -I objs \ -o
objs/src/event/ngx_event_openssl.o \ src/event/ngx_event_openssl.c
src/event/ngx_event_openssl.c: In function ngx_ssl_create:
src/event/ngx_event_openssl.c:189:5: error:
âSSL_OP_MSIE_SSLV2_RSA_PADDINGâ
undeclared (first use in this function)
src/event/ngx_event_openssl.c:189:5:
note: each undeclared identifier is reported only once for each function
it
appears in make[1]: * [objs/src/event/ngx_event_openssl.o] Erreur 1
make[1]:
quittant le répertoire « /root/nginx/nginx-1.4.3 » make: * [build]
Erreur 2
It seems error comes from :
Planned removal of SSL_OP_MSIE_SSLV2_RSA_PADDING breaks dependent
software
if you are using OpenSSL 1.0.2 or higher.
How to install Nginx from source and avoid the OpenSSL Bug ?
What openssl bug are you talking about? Debian contains all
important fixes afaik.
I think 'yarek’
tries to build nginx with a 3rd-party program.
I’d suggest to use either the latest stable (v1.6.0) or mainline
(v1.7.1)
source.
v1.4.3 is pretty old now and is deprecated.
Btw, nginx links the OpenSSL library dynamically, so the bug has never
lied
inside nginx.
It depends on the version of OpenSSL which has been used to compile
nginx
(since using a version other than the one used for compilation at run
time
might fail/introduce problems).
It seems error comes from :
’yarek’ you could have compared the error message triggered by the
source
you were using with the current ngx_event_openssl.c source file http://trac.nginx.org/nginx/browser/nginx/src/event/ngx_event_openssl.c.
You would have seen that the deprecation of the constant you triggered
is
handled, by a check for its existence. Lukas has been kind enough to
provide you with the exact commit introducing this change.
use an unaffected version of OpenSSL https://www.openssl.org/news/secadv_20140407.txt when compiling your
nginx binary. All major distro (including Debian) have fixed their
repositories with corrected versions for a long time now