flewkey/flewkey.com
1
0
Fork 0
Code Releases Activity

nds-constrain't: Correct OpenSSL flag

Browse Source
This commit is contained in:
Ryan Fox 2021-02-03 06:50:16 +00:00
parent 4f04645d76
commit 2114932b9a
Signed by: flewkey
GPG Key ID: 94F56ADFD848851E
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
posts/2020-07-12-nds-constraint.md
View File

@ -145,15 +145,15 @@ so:
./configure --with-http_ssl_module --with-openssl=/path/to/openssl/src \
--with-openssl-opt=enable-ssl3 --with-openssl-opt=enable-ssl3-method \
--with-openssl-opt=enable-weak-ciphers
--with-openssl-opt=enable-weak-ssl-ciphers
Run "make" and "sudo make install" like usual. Be sure that you run the version
of NGINX in /usr/local for nds-constrain't. You might want to uninstall any
existing versions of NGINX to avoid confusion.
Gentoo users can add the "sslv3" and "weak-ciphers" USE flags to OpenSSL
and rebuild it. Since there is no weak-ciphers USE flag at the time of writing,
you might want to add my
Gentoo users can add the "sslv3" and "weak-ssl-ciphers" USE flags to OpenSSL
and rebuild it. Since there is no weak-ssl-ciphers USE flag at the time of
writing, you might want to add my
[flewkey-overlay](https://git.sdf.org/flewkey/flewkey-overlay) and unmask
`dev-libs/openssl::flewkey-overlay`. After that, install NGINX as usual.
@ -163,7 +163,7 @@ Download and extract the [OpenSSL](https://www.openssl.org/source/) and
[Apache](https://httpd.apache.org/download.cgi) sources. Then, we must configure
OpenSSL like so:
./config enable-ssl3 enable-ssl3-method enable-weak-ciphers
./config enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers
After this, run "make" and "sudo make install". OpenSSL will install in
/usr/local and /usr/local/ssl by default, so it shouldn't interfere with the
@ -179,9 +179,9 @@ Run "make" and "sudo make install" like usual. Be sure that you use the version
of Apache in /usr/local for nds-constrain't. You might want to uninstall any
existing versions of Apache to avoid confusion.
Gentoo users can add the "sslv3" and "weak-ciphers" USE flags to OpenSSL
and rebuild it. Since there is no weak-ciphers USE flag at the time of writing,
you might want to add my
Gentoo users can add the "sslv3" and "weak-ssl-ciphers" USE flags to OpenSSL
and rebuild it. Since there is no weak-ssl-ciphers USE flag at the time of
writing, you might want to add my
[flewkey-overlay](https://git.sdf.org/flewkey/flewkey-overlay) and unmask
`dev-libs/openssl::flewkey-overlay`. After that, install Apache as usual.