From 2114932b9a9418883d100630ce344e70e924bca3 Mon Sep 17 00:00:00 2001 From: Ryan Fox Date: Wed, 3 Feb 2021 06:50:16 +0000 Subject: [PATCH] nds-constrain't: Correct OpenSSL flag --- posts/2020-07-12-nds-constraint.md | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/posts/2020-07-12-nds-constraint.md b/posts/2020-07-12-nds-constraint.md index 29f1c08..febe450 100644 --- a/posts/2020-07-12-nds-constraint.md +++ b/posts/2020-07-12-nds-constraint.md @@ -145,15 +145,15 @@ so: ./configure --with-http_ssl_module --with-openssl=/path/to/openssl/src \ --with-openssl-opt=enable-ssl3 --with-openssl-opt=enable-ssl3-method \ - --with-openssl-opt=enable-weak-ciphers + --with-openssl-opt=enable-weak-ssl-ciphers Run "make" and "sudo make install" like usual. Be sure that you run the version of NGINX in /usr/local for nds-constrain't. You might want to uninstall any existing versions of NGINX to avoid confusion. -Gentoo users can add the "sslv3" and "weak-ciphers" USE flags to OpenSSL -and rebuild it. Since there is no weak-ciphers USE flag at the time of writing, -you might want to add my +Gentoo users can add the "sslv3" and "weak-ssl-ciphers" USE flags to OpenSSL +and rebuild it. Since there is no weak-ssl-ciphers USE flag at the time of +writing, you might want to add my [flewkey-overlay](https://git.sdf.org/flewkey/flewkey-overlay) and unmask `dev-libs/openssl::flewkey-overlay`. After that, install NGINX as usual. @@ -163,7 +163,7 @@ Download and extract the [OpenSSL](https://www.openssl.org/source/) and [Apache](https://httpd.apache.org/download.cgi) sources. Then, we must configure OpenSSL like so: - ./config enable-ssl3 enable-ssl3-method enable-weak-ciphers + ./config enable-ssl3 enable-ssl3-method enable-weak-ssl-ciphers After this, run "make" and "sudo make install". OpenSSL will install in /usr/local and /usr/local/ssl by default, so it shouldn't interfere with the @@ -179,9 +179,9 @@ Run "make" and "sudo make install" like usual. Be sure that you use the version of Apache in /usr/local for nds-constrain't. You might want to uninstall any existing versions of Apache to avoid confusion. -Gentoo users can add the "sslv3" and "weak-ciphers" USE flags to OpenSSL -and rebuild it. Since there is no weak-ciphers USE flag at the time of writing, -you might want to add my +Gentoo users can add the "sslv3" and "weak-ssl-ciphers" USE flags to OpenSSL +and rebuild it. Since there is no weak-ssl-ciphers USE flag at the time of +writing, you might want to add my [flewkey-overlay](https://git.sdf.org/flewkey/flewkey-overlay) and unmask `dev-libs/openssl::flewkey-overlay`. After that, install Apache as usual.