NGINX 1.17.10 mainline version with brotli compression library from Google, TLS 1.3 Final (RFC 8446), http2 (HTTP/2), ngx cache purge и ngx http geoip2 module support. SSL is built dynamically against OpenSSL 1.1.1g. Please note that TLS 1.3 final version is supported in Chrome 70+ and Mozilla Firefox 63+. To enable TLS 1.3, you must specify
ssl_protocols TLSv1.2 TLSv1.3;
Since 1.17.10 release for Centos 7 we build OpenSSL as a separate package that installs to the separate directory (/opt/codeit/openssl111) and does not affects system libraries.
Alternatively, feel free to use our CentOS/RHEL repository.