hakasenyang/nginx-build

Nginx custom build by Hakase

nginx-build's Issues

Cipher issues

Hi, as per https://www.ssllabs.com/ssltest/analyze.html?d=ssl.hakase.io

Chrome 69 / Win 7  R | Protocol or cipher suite mismatch0x7f1c  |  TLS_AES_128_GCM_SHA256
Firefox 62 / Win 7  R | Protocol or cipher suite mismatch0x7f1c  |  TLS_AES_128_GCM_SHA256
TLS_RSA_WITH_AES_128_CBC_SHA (0x2f) WEAK
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) WEAK
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) WEAK

Are you able to fix these? Thanks.

CloudFlare IPs updated

nginx.conf

set_real_ip_from 103.21.244.0/22;
set_real_ip_from 103.22.200.0/22;
set_real_ip_from 103.31.4.0/22;
set_real_ip_from 104.16.0.0/12;
set_real_ip_from 108.162.192.0/18;
set_real_ip_from 131.0.72.0/22;
set_real_ip_from 141.101.64.0/18;
set_real_ip_from 162.158.0.0/15;
set_real_ip_from 172.64.0.0/13;
set_real_ip_from 173.245.48.0/20;
set_real_ip_from 188.114.96.0/20;
set_real_ip_from 190.93.240.0/20;
set_real_ip_from 197.234.240.0/22;
set_real_ip_from 198.41.128.0/17;
set_real_ip_from 2400:cb00::/32;
set_real_ip_from 2606:4700::/32;
set_real_ip_from 2803:f800::/32;
set_real_ip_from 2405:b500::/32;
set_real_ip_from 2405:8100::/32;
set_real_ip_from 2c0f:f248::/32;
set_real_ip_from 2a06:98c0::/29;

ARM support

I failed to build Nginx with this script on my Raspberry Pi 3 Model B+ and I thought that it would be nice that this scripts supports building on ARM CPU's at some point in the future.

진작 깃허브에 올려두시지 그러셨나요

ㅠㅠ https://github.com/eosclab/nginx-build 깃허브 만세

s3_cbc.c:(.text+0xcbf): undefined reference to `ssl_evp_md_fetch'

OpenSSL 1.0.2k-fips 26 Jan 2017

gcc  -Iapps -I. -Iinclude -Iapps/include  -m64 -Wa,--noexecstack -Wall -O3 -march=native -DNDEBUG  -MMD -MF apps/openssl-bin-x509.d.tmp -MT apps/openssl-bin-x509.o -c -o apps/openssl-bin-x509.o apps/x509.c
rm -f fuzz/asn1-test
${LDCMD:-gcc} -m64 -Wa,--noexecstack -Wall -O3 -march=native -L.   \
        -o fuzz/asn1-test \
        fuzz/asn1-test-bin-asn1.o fuzz/asn1-test-bin-test-corpus.o \
        -lssl -lcrypto -ldl -ljemalloc
./libssl.a(libssl-lib-s3_cbc.o): In function `ssl3_cbc_digest_record':
s3_cbc.c:(.text+0xcbf): undefined reference to `ssl_evp_md_fetch'
s3_cbc.c:(.text+0xe76): undefined reference to `ssl_evp_md_free'
collect2: error: ld returned 1 exit status
make[3]: *** [fuzz/asn1-test] Error 1
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/opt/nginx-build/lib/openssl'
make[2]: *** [build_sw] Error 2
make[2]: Leaving directory `/opt/nginx-build/lib/openssl'
make[1]: *** [lib/openssl/.openssl/include/openssl/ssl.h] Error 2
make[1]: Leaving directory `/opt/nginx-build'
make: *** [install] Error 2

Can't locate Test/More.pm in @INC

gcc  -I. -Icrypto -Iinclude -Iproviders/implementations/include -Iproviders/common/include  -DAES_ASM -DBSAES_ASM -DECP_NISTZ256_ASM -DGHASH_ASM -DKECCAK1600_ASM -DMD5_ASM -DOPENSSL_BN_ASM_GF2m -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_CPUID_OBJ -DOPENSSL_IA32_SSE2 -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DVPAES_ASM -DWHIRLPOOL_ASM -DX25519_ASM -fPIC -m64 -Wa,--noexecstack -Wall -O3 -march=native -DOPENSSL_USE_NODELETE -DL_ENDIAN -DOPENSSL_BUILDING_OPENSSL -DOPENSSL_PIC -DOPENSSLDIR="\"/opt/nginx-build/lib/openssl/.openssl/ssl\"" -DENGINESDIR="\"/opt/nginx-build/./lib/openssl/.openssl/lib/engines-3\"" -DMODULESDIR="\"/opt/nginx-build/./lib/openssl/.openssl/lib/ossl-modules\"" -DNDEBUG  -MMD -MF providers/implementations/serializers/libimplementations-lib-serializer_rsa_pub.d.tmp -MT providers/implementations/serializers/libimplementations-lib-serializer_rsa_pub.o -c -o providers/implementations/serializers/libimplementations-lib-serializer_rsa_pub.o providers/implementations/serializers/serializer_rsa_pub.c
/usr/bin/perl "-I." "-Iproviders/common/der" -Mconfigdata -Moids_to_c "util/dofile.pl" "-oMakefile" providers/common/der/der_dsa.h.in > providers/common/include/prov/der_dsa.h
Can't locate Test/More.pm in @INC (@INC contains: /opt/nginx-build/lib/openssl/util/perl . providers/common/der /usr/local/lib64/perl5 /usr/local/share/perl5 /usr/lib64/perl5/vendor_perl /usr/share/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5 /opt/nginx-build/lib/openssl/external/perl/Text-Template-1.56/lib) at /opt/nginx-build/lib/openssl/util/perl/OpenSSL/OID.pm line 309.
BEGIN failed--compilation aborted at /opt/nginx-build/lib/openssl/util/perl/OpenSSL/OID.pm line 309.
Compilation failed in require at providers/common/der/oids_to_c.pm line 16.
BEGIN failed--compilation aborted at providers/common/der/oids_to_c.pm line 16.
Compilation failed in require.
BEGIN failed--compilation aborted.
make[3]: *** [providers/common/include/prov/der_dsa.h] Error 2
make[3]: *** Waiting for unfinished jobs....
make[3]: Leaving directory `/opt/nginx-build/lib/openssl'
make[2]: *** [build_sw] Error 2
make[2]: Leaving directory `/opt/nginx-build/lib/openssl'
make[1]: *** [lib/openssl/.openssl/include/openssl/ssl.h] Error 2
make[1]: Leaving directory `/opt/nginx-build'
make: *** [install] Error 2

geoip2 module

Hi, possible to use the geoip2 module instead of geoip? geoip is the legacy database and geoip2 is the newer 1. https://github.com/leev/ngx_http_geoip2_module

Thanks!