Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread sukeerthiadiga
gariac Wrote: --- > Isn't Openssl part of your OS? > > > > > >   Original Message   > > > From: nginx-fo...@forum.nginx.org > Sent: March 26, 2022 11:07 PM > To: nginx@nginx.org > Reply-to: nginx@nginx.org > Subject: Nginx with O

Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread sukeerthiadiga
Yes, My question was more closely related to the windows binaries with OpenSSL statically compiled. As of now Nginx version 1.21.6 has OpenSSL 1.1.1m. I was looking for the answer to see whether Nginx is planning to do another release with OpenSSL 1.1.1n statically compiled. Posted at Nginx Forum

Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread sukeerthiadiga
Yes, My question was more closely related to the windows binaries with OpenSSL statically compiled. As of now Nginx version 1.21.6 has OpenSSL 1.1.1m. I was looking for the answer to see whether Nginx is planning to do another release with OpenSSL 1.1.1n statically compiled. Posted at Nginx Foru

Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread Lukas Tribus
On Sun, 27 Mar 2022 at 15:58, Sergey A. Osokin wrote: > > Hi, > > On Sun, Mar 27, 2022 at 02:04:10AM -0400, sukeerthiadiga wrote: > > The Mainline version of Nginx i.e 1.12.6 has the OpenSSL version 1.1.1m and > > it is vulnerable. > > That's a bit far from true. NGINX, as many other products, de

Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread Eric Germann via nginx
Compile yourself. I do that and can build it with any OpenSSL version I like. Why? Centos 6 doesn’t update the packages anymore and I’m too lazy to rebuild a reverse proxy. Eric > On Mar 27, 2022, at 10:00, Sergey A. Osokin wrote: > > Hi, > >> On Sun, Mar 27, 2022 at 02:04:10AM -0400, su

Re: Nginx with OpenSSL 1.1.1n

2022-03-27 Thread Sergey A. Osokin
Hi, On Sun, Mar 27, 2022 at 02:04:10AM -0400, sukeerthiadiga wrote: > The Mainline version of Nginx i.e 1.12.6 has the OpenSSL version 1.1.1m and > it is vulnerable. That's a bit far from true. NGINX, as many other products, depends on other open source software components, like openssl, pcre, z