nginx openssl 编译
安装依赖
yum install gc gcc gcc-c++ pcre-devel zlib-devel make wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel gperftools gperftools-devel libatomic_ops-devel perl-ExtUtils-Embed dpkg-dev libpcrecpp0 libgd2-xpm-dev libgeoip-dev libperl-dev -yhttps://www.joomlagate.com/index.php?option=com_content&view=article&id=325:recompile-nginx-with-openssl-1-0-2-on-centos-to-support-http-2&Itemid=19
centos 6 yum install nginx 的openssl 默认版本是 1.0.1e,这是一个有诸多漏洞的版本，而nginx 不支持yum update,只能重新编译nginx
切换目录到/usr/local/src
从https://www.openssl.org/source/下载
| openssl-1.1.0h.tar.gz |
解压后如下
/usr/local/src/openssl-1.1.0h
从 http://nginx.org/en/download.html 下载稳定版本或者与原来系统上一致的版本
解压
切换到nginx目录下/usr/local/src/nginx-1.14.0
./configure --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib64/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-openssl=/usr/local/src/openssl-1.1.0h --user=www-data --group=www-data --with-http_ssl_module --with-http_realip_module --with-http_addition_module --with-http_sub_module --with-http_dav_module --with-http_flv_module --with-http_mp4_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_random_index_module --with-http_secure_link_module --with-http_stub_status_module --with-http_auth_request_module --with-threads --with-stream --with-stream_ssl_module --with-http_slice_module --with-mail --with-mail_ssl_module --with-file-aio --with-http_v2_module --with-ipv6 --with-compat --with-stream_realip_module --with-stream_ssl_preread_module然后
make
make install1 #!/bin/sh
2 #
3 # nginx Startup script for nginx
4 #
5 # chkconfig: - 85 15
6 # processname: nginx
7 # config: /etc/nginx/nginx.conf
8 # config: /etc/sysconfig/nginx
9 # pidfile: /var/run/nginx.pid
10 # description: nginx is an HTTP and reverse proxy server
11 #
12 ### BEGIN INIT INFO
13 # Provides: nginx
14 # Required-Start: $local_fs $remote_fs $network
15 # Required-Stop: $local_fs $remote_fs $network
16 # Default-Start: 2 3 4 5
17 # Default-Stop: 0 1 6
18 # Short-Description: start and stop nginx
19 ### END INIT INFO
20 # Source function library.
21 . /etc/rc.d/init.d/functions
22 if [ -L $0 ]; then
23 initscript=`/bin/readlink -f $0`
24 else
25 initscript=$0
26 fi
27 sysconfig=`/bin/basename $initscript`
28 if [ -f /etc/sysconfig/$sysconfig ]; then
29 . /etc/sysconfig/$sysconfig
30 fi
31 nginx=${NGINX:-/usr/sbin/nginx}
32 prog=`/bin/basename $nginx`
33 conffile=${CONFFILE:-/etc/nginx/nginx.conf}
34 lockfile=${LOCKFILE:-/var/lock/subsys/nginx}
35 pidfile=${PIDFILE:-/var/run/nginx.pid}
36 SLEEPSEC=${SLEEPSEC:-1}
37 UPGRADEWAITLOOPS=${UPGRADEWAITLOOPS:-5}
38 CHECKSLEEP=${CHECKSLEEP:-3}
39 RETVAL=0
40 start() {
41 echo -n $"Starting $prog: "
42 daemon --pidfile=${pidfile} ${nginx} -c ${conffile}
43 RETVAL=$?
44 echo
45 [ $RETVAL = 0 ] && touch ${lockfile}
46 return $RETVAL
47 }
48 stop() {
49 echo -n $"Stopping $prog: "
50 killproc -p ${pidfile} ${prog}
51 RETVAL=$?
52 echo
53 [ $RETVAL = 0 ] && rm -f ${lockfile} ${pidfile}
54 }
55 reload() {
56 echo -n $"Reloading $prog: "
57 killproc -p ${pidfile} ${prog} -HUP
58 RETVAL=$?
59 echo
60 }
61 upgrade() {
62 oldbinpidfile=${pidfile}.oldbin
63 configtest -q || return
64 echo -n $"Starting new master $prog: "
65 killproc -p ${pidfile} ${prog} -USR2
66 echo
67 for i in `/usr/bin/seq $UPGRADEWAITLOOPS`; do
68 /bin/sleep $SLEEPSEC
69 if [ -f ${oldbinpidfile} -a -f ${pidfile} ]; then
70 echo -n $"Graceful shutdown of old $prog: "
71 killproc -p ${oldbinpidfile} ${prog} -QUIT
72 RETVAL=$?
73 echo
74 return
75 fi
76 done
77 echo $"Upgrade failed!"
78 RETVAL=1
79 }
80 configtest() {
81 if [ "$#" -ne 0 ] ; then
82 case "$1" in
83 -q)
84 FLAG=$1
85 ;;
86 *)
87 ;;
88 esac
89 shift
90 fi
91 ${nginx} -t -c ${conffile} $FLAG
92 RETVAL=$?
93 return $RETVAL
94 }
95 rh_status() {
96 status -p ${pidfile} -b ${nginx} ${nginx}
97 }
98 check_reload() {
99 templog=`/bin/mktemp --tmpdir nginx-check-reload-XXXXXX.log`
100 trap '/bin/rm -f $templog' 0
101 /usr/bin/tail --pid=$$ -n 0 --follow=name /var/log/nginx/error.log > $templog &
102 /bin/sleep 1
103 /bin/echo -n $"Sending reload signal to $prog: "
104 killproc -p ${pidfile} ${prog} -HUP
105 /bin/echo
106 /bin/sleep $CHECKSLEEP
107 /bin/grep -E "\[emerg\]|\[alert\]" $templog
108 }
109 # See how we were called.
110 case "$1" in
111 start)
112 rh_status >/dev/null 2>&1 && exit 0
113 start
114 ;;
115 stop)
116 stop
117 ;;
118 status)
119 rh_status
120 RETVAL=$?
121 ;;
122 restart)
123 configtest -q || exit $RETVAL
124 stop
125 start
126 ;;
127 upgrade)
128 rh_status >/dev/null 2>&1 || exit 0
129 upgrade
130 ;;
131 condrestart|try-restart)
132 if rh_status >/dev/null 2>&1; then
133 stop
134 start
135 fi
136 ;;
137 force-reload|reload)
138 reload
139 ;;
140 configtest)
141 configtest
142 ;;
143 check-reload)
144 check_reload
145 RETVAL=0
146 ;;
147 *)
148 echo $"Usage: $prog {start|stop|restart|condrestart|try-restart|force-reload|upgrade|reload|status|help|configtest|check-reload}"
149 RETVAL=2
150 esac
151 exit $RETVAL
/etc/init.d下新建nginx 文件 内容如上
# chmod 755 /etc/init.d/nginx
# chkconfig --add nginx (注意add前面是两个短横线-)service nginx start
| openssl-1.1.0h.tar.gz |