2019년 2월 5일 – PLURA XDR

HAProxy 1.8.x support tls v1.3 in CentOS 7

O. Prerequisites with openssl 1.1.1 yum -y install pcre2-devel zlib-devel 1. Download wget http://www.haproxy.org/download/1.8/src/haproxy-1.8.17.tar.gz tar -xvzf haproxy-1.8.17.tar.gz sleep 1 cd haproxy-1.8.17 2. Install make TARGET=linux2628 CPU=native USE_PCRE2=1 USE_PCRE2_JIT=1 USE_OPENSSL=1 SSL_LIB=/usr/local/ssl/lib SSL_INC=/usr/local/ssl/include/openssl USE_ZLIB=1 make install 3. Configuration 8. Reference https://dnsprivacy.org/wiki/display/DP/Building+HAProxy+so+that+it+can+use+TLSv1.3 https://certsimple.com/blog/haproxy-http2-dynamic-load-balancing-ssl http://itscom.org/archives/8377

NGINX install support tls v1.3 in CentOS 7

0. Prerequisites openssl 1.1.1 http://blog.plura.io/?p=9209 1. Install redhat-lsb-core yum install redhat-lsb-core yum -y install wget openssl-devel libxml2-devel libxslt-devel gd-devel perl-ExtUtils-Embed GeoIP-devel pcre-devel 2. User add useradd builder groupadd builder 3. download wget http://nginx.org/packages/mainline/centos/7/SRPMS/nginx-1.15.8-1.el7_4.ngx.src.rpm 4. Configuration rpm -ivh nginx-1.15.8-1.el7_4.ngx.src.rpm sed -i "s|--with-http_ssl_module|--with-http_ssl_module --with-openssl=/usr/local/src/openssl-1.1.1a --with-openssl-opt=enable-tls1_3 |g" /root/rpmbuild/SPECS/nginx.spec 5. Compile rpmbuild -ba /root/rpmbuild/SPECS/nginx.spec 6. Install rpm -ivh /root/rpmbuild/RPMS/x86_64/nginx-1.15.8-1.el7_4.ngx.x86_64.rpm

Daily Archives: 2019년 2월 5일

HAProxy 1.8.x support tls v1.3 in CentOS 7

NGINX install support tls v1.3 in CentOS 7