Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

nginx isn't compile with SSL #864

Closed
foxy82 opened this issue Feb 6, 2015 · 5 comments

Comments

Projects
None yet
5 participants
@foxy82
Copy link

commented Feb 6, 2015

I'm on Barrier Breaker and have installed nginx but the SSL options don't work as it hasn't been compile with SSL. Is there a way I can install SSL?

@heil

This comment has been minimized.

Copy link
Contributor

commented Feb 6, 2015

Hi,
On 06.02.2015 09:25, foxy82 wrote:

I'm on Barrier Breaker and have installed nginx but the SSL options
don't work as it hasn't been compile with SSL. Is there a way I can
install SSL?


Reply to this email directly or view it on GitHub
#864.

SSL is not the default for Barrier Breaker. So you need to take the
ImageBuilder and recompile the nginx package with SSL Support. You can
also try
to use haproxy which has SSL Support allready.

cheers
thomas

@dangowrt

This comment has been minimized.

Copy link
Member

commented Feb 6, 2015

On Fri, Feb 06, 2015 at 03:56:59AM -0800, Thomas Heil wrote:

Hi,
On 06.02.2015 09:25, foxy82 wrote:

I'm on Barrier Breaker and have installed nginx but the SSL options
don't work as it hasn't been compile with SSL. Is there a way I can
install SSL?


Reply to this email directly or view it on GitHub
#864.

SSL is not the default for Barrier Breaker. So you need to take the
ImageBuilder and recompile the nginx package with SSL Support. You can
also try
to use haproxy which has SSL Support allready.

Small correction: To re-build nginx with SSL (or any other package) for a specific release, you will need the OpenWrt-SDK-* rather than OpenWrt-ImageBuilder-*

@heil

This comment has been minimized.

Copy link
Contributor

commented Feb 6, 2015

Hi,

On 06.02.2015 15:28, Daniel Golle wrote:

On Fri, Feb 06, 2015 at 03:56:59AM -0800, Thomas Heil wrote:

Hi,
On 06.02.2015 09:25, foxy82 wrote:

I'm on Barrier Breaker and have installed nginx but the SSL options
don't work as it hasn't been compile with SSL. Is there a way I can
install SSL?


Reply to this email directly or view it on GitHub
#864.

SSL is not the default for Barrier Breaker. So you need to take the
ImageBuilder and recompile the nginx package with SSL Support. You can
also try
to use haproxy which has SSL Support allready.

Small correction: To re-build nginx with SSL (or any other package)
for a specific release, you will need the OpenWrt-SDK-* rather than
OpenWrt-ImageBuilder-*

Thats right, my fault.


Reply to this email directly or view it on GitHub
#864 (comment).

@champtar

This comment has been minimized.

Copy link
Member

commented Mar 19, 2015

Hi @heil,
your answer is a bit misleading, because SSL isn't the default in CC, not only in BB

@champtar champtar closed this Mar 19, 2015

@praeluceo

This comment has been minimized.

Copy link

commented Feb 29, 2016

I can confirm that this also affects CC:
root@Helepolis:/etc/nginx# nginx -V nginx version: nginx/1.4.7 built by gcc 4.8.3 (OpenWrt/Linaro GCC 4.8-2014.04 r46450) configure arguments: --crossbuild=Linux::arm --prefix=/usr --conf-path=/etc/nginx/nginx.conf --add-module=/home/buildbot/slave-local/mvebu_generic/build/build_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/nginx-1.4.7/nginx-naxsi/naxsi_src --with-ipv6 --without-http-cache --add-module=/home/buildbot/slave-local/mvebu_generic/build/build_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/nginx-1.4.7/nginx-syslog --error-log-path=/var/log/nginx/error.log --pid-path=/var/run/nginx.pid --lock-path=/var/lock/nginx.lock --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/body --http-proxy-temp-path=/var/lib/nginx/proxy --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --with-cc=ccache_cc --with-cc-opt='-I/home/buildbot/slave-local/mvebu_generic/build/staging_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/usr/include -I/home/buildbot/slave-local/mvebu_generic/build/staging_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/include -I/home/buildbot/slave-local/mvebu_generic/build/staging_dir/toolchain-arm_cortex-a9+vfpv3_gcc-4.8-linaro_uClibc-0.9.33.2_eabi/usr/include -I/home/buildbot/slave-local/mvebu_generic/build/staging_dir/toolchain-arm_cortex-a9+vfpv3_gcc-4.8-linaro_uClibc-0.9.33.2_eabi/include -Os -pipe -march=armv7-a -mtune=cortex-a9 -mfpu=vfpv3-d16 -fno-caller-saves -fhonour-copts -Wno-error=unused-but-set-variable -mfloat-abi=soft' --with-ld-opt='-L/home/buildbot/slave-local/mvebu_generic/build/staging_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/usr/lib -L/home/buildbot/slave-local/mvebu_generic/build/staging_dir/target-arm_cortex-a9+vfpv3_uClibc-0.9.33.2_eabi/lib -L/home/buildbot/slave-local/mvebu_generic/build/staging_dir/toolchain-arm_cortex-a9+vfpv3_gcc-4.8-linaro_uClibc-0.9.33.2_eabi/usr/lib -L/home/buildbot/slave-local/mvebu_generic/build/staging_dir/toolchain-arm_cortex-a9+vfpv3_gcc-4.8-linaro_uClibc-0.9.33.2_eabi/lib' root@Helepolis:/etc/nginx# cat /etc/openwrt_* DISTRIB_ID='OpenWrt' DISTRIB_RELEASE='Chaos Calmer' DISTRIB_REVISION='r47608' DISTRIB_CODENAME='chaos_calmer' DISTRIB_TARGET='mvebu/generic' DISTRIB_DESCRIPTION='OpenWrt Chaos Calmer 15.05' DISTRIB_TAINTS='no-all' 15.05

When the build servers are back up, could nginx be compiled with common stock options built-in by default?

For comparison, these are the modules compiled into nginx by default in Ubuntu:

root@trebuchet:/$ nginx -V nginx version: nginx/1.1.19 TLS SNI support enabled configure arguments: --prefix=/etc/nginx --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-log-path=/var/log/nginx/access.log --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --lock-path=/var/lock/nginx.lock --pid-path=/var/run/nginx.pid --with-debug --with-http_addition_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_realip_module --with-http_stub_status_module --with-http_ssl_module --with-http_sub_module --with-http_xslt_module --with-ipv6 --with-sha1=/usr/include/openssl --with-md5=/usr/include/openssl --with-mail --with-mail_ssl_module --add-module=/build/buildd/nginx-1.1.19/debian/modules/nginx-auth-pam --add-module=/build/buildd/nginx-1.1.19/debian/modules/nginx-echo --add-module=/build/buildd/nginx-1.1.19/debian/modules/nginx-upstream-fair --add-module=/build/buildd/nginx-1.1.19/debian/modules/nginx-dav-ext-module

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.