NGINX 1.16.1-1 stable с OpenSSL 1.1.1d TLS 1.3 Final (RFC 8446) и brotli для Red Hat Enterprise Linux и CentOS

В репозиторий добавлены NGINX 1.16.1-1 stable версий, собранные статически с OpenSSL 1.1.1d и ngx cache purge и ngx http geoip2 module. Работает сжатие brotli (v1.0.7) и поддержка TLS 1.3 final, которая поставляется в версии Google Chrome 70.

Для включения TLS 1.3 надо указать:

ssl_protocols TLSv1 TLSv1.1 TLSv1.2 TLSv1.3;

Ссылки:

Или же воспользуйтесь нашим CentOS/RHEL repository

NGINX 1.16.1-1 stable с OpenSSL 1.1.1d TLS 1.3 Final (RFC 8446) и brotli для Red Hat Enterprise Linux и CentOS: 13 комментариев

  1. Hi,

    For some reason using your repo is now creating a dependancy to install nginx as a new package because of the following:

    nginx x86_64 1:1.16.1-1.el7.codeit CodeIT 3.5 M
    replacing libbrotli.x86_64 1:1.0.6-1.codeit.el7

  2. yum update —enablerepo epel
    Failed to set locale, defaulting to C
    Loaded plugins: changelog, fastestmirror, presto
    Setting up Update Process
    Loading mirror speeds from cached hostfile
    * base: centos.mirrors.ovh.net
    * epel: mirror.freethought-internet.co.uk
    * extras: centos.mirrors.ovh.net
    * remi-php70: remi.mirror.ate.info
    * remi-safe: remi.mirror.ate.info
    * rpmforge: mirrors.ircam.fr
    * updates: centos.mirrors.ovh.net
    Resolving Dependencies
    —> Running transaction check
    —> Package nginx.x86_64 1:1.16.0-1.el6.codeit will be updated
    —> Package nginx.x86_64 1:1.16.1-1.el6.codeit will be an update
    —> Processing Dependency: libbrotli = 1:1.0.7 for package: 1:nginx-1.16.1-1.el6.codeit.x86_64
    —> Package php-pear.noarch 1:1.10.9-3.el6.remi will be updated
    —> Package php-pear.noarch 1:1.10.9-4.el6.remi will be an update
    —> Package php56-php-pear.noarch 1:1.10.9-2.el6.remi will be updated
    —> Package php56-php-pear.noarch 1:1.10.9-4.el6.remi will be an update
    —> Package php73-php-pear.noarch 1:1.10.9-2.el6.remi will be updated
    —> Package php73-php-pear.noarch 1:1.10.9-4.el6.remi will be an update
    —> Package python34.x86_64 0:3.4.10-1.el6 will be updated
    —> Package python34.x86_64 0:3.4.10-4.el6 will be an update
    —> Package python34-devel.x86_64 0:3.4.10-1.el6 will be updated
    —> Package python34-devel.x86_64 0:3.4.10-4.el6 will be an update
    —> Package python34-libs.x86_64 0:3.4.10-1.el6 will be updated
    —> Package python34-libs.x86_64 0:3.4.10-4.el6 will be an update
    —> Package python34-tkinter.x86_64 0:3.4.10-1.el6 will be updated
    —> Package python34-tkinter.x86_64 0:3.4.10-4.el6 will be an update
    —> Package python34-tools.x86_64 0:3.4.10-1.el6 will be updated
    —> Package python34-tools.x86_64 0:3.4.10-4.el6 will be an update
    —> Finished Dependency Resolution
    Error: Package: 1:nginx-1.16.1-1.el6.codeit.x86_64 (CodeIT)
    Requires: libbrotli = 1:1.0.7
    Installed: 1:libbrotli-1.0.6-1.codeit.el6.x86_64 (@CodeIT)
    libbrotli = 1:1.0.6-1.codeit.el6
    Available: libbrotli-1.0.20160607.git.3f46e28-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160607.git.3f46e28-1.el6.codeit
    Available: libbrotli-1.0.20160907.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160907.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20160927.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160927.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20161013.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20161013.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20161021.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20161021.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170201.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170201.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170227.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170227.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170418.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170418.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170828.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170828.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20171011.git.805fd3b-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20171011.git.805fd3b-1.el6.codeit
    Available: 1:libbrotli-1.0.4-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1:1.0.4-1.el6.codeit
    You could try using —skip-broken to work around the problem
    You could try running: rpm -Va —nofiles —nodigest

      1. Resolving Dependencies
        —> Running transaction check
        —> Package nginx.x86_64 1:1.16.0-1.el6.codeit will be updated
        —> Package nginx.x86_64 1:1.16.1-1.el6.codeit will be an update
        —> Processing Dependency: libbrotli = 1:1.0.7 for package: 1:nginx-1.16.1-1.el6.codeit.x86_64
        —> Finished Dependency Resolution
        Error: Package: 1:nginx-1.16.1-1.el6.codeit.x86_64 (CodeIT)
        Requires: libbrotli = 1:1.0.7
        Installed: 1:libbrotli-1.0.6-1.codeit.el6.x86_64 (@CodeIT)
        libbrotli = 1:1.0.6-1.codeit.el6
        Available: libbrotli-1.0.20160607.git.3f46e28-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20160607.git.3f46e28-1.el6.codeit
        Available: libbrotli-1.0.20160907.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20160907.git.6b12316-1.el6.codeit
        Available: libbrotli-1.0.20160927.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20160927.git.6b12316-1.el6.codeit
        Available: libbrotli-1.0.20161013.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20161013.git.6b12316-1.el6.codeit
        Available: libbrotli-1.0.20161021.git.a258234-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20161021.git.a258234-1.el6.codeit
        Available: libbrotli-1.0.20170201.git.a258234-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20170201.git.a258234-1.el6.codeit
        Available: libbrotli-1.0.20170227.git.a258234-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20170227.git.a258234-1.el6.codeit
        Available: libbrotli-1.0.20170418.git.a258234-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20170418.git.a258234-1.el6.codeit
        Available: libbrotli-1.0.20170828.git.a258234-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20170828.git.a258234-1.el6.codeit
        Available: libbrotli-1.0.20171011.git.805fd3b-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1.0.20171011.git.805fd3b-1.el6.codeit
        Available: 1:libbrotli-1.0.4-1.el6.codeit.x86_64 (CodeIT)
        libbrotli = 1:1.0.4-1.el6.codeit
        You could try using —skip-broken to work around the problem
        You could try running: rpm -Va —nofiles —nodigest

  3. Me too getting this on my CentOS 6 which I hoped to be able to run until end of Nov 2020…

    Installing libbrotli-1.0.7-1.codeit.el6.x86_64.rpm from mainline *manually* would probably work but is this the preferred method?

    yum —enablerepo=epel update
    Loaded plugins: changelog, etckeeper, fastestmirror
    Setting up Update Process
    Loading mirror speeds from cached hostfile
    * base: http://ftp.plusline.net
    * centos-sclo-rh: centos.intergenia.de
    * centos-sclo-sclo: mirror.imt-systems.com
    * epel: mirror.imt-systems.com
    * extras: http://ftp.rz.uni-frankfurt.de
    * updates: centos.intergenia.de
    Resolving Dependencies
    —> Running transaction check
    —> Package nginx.x86_64 1:1.16.0-1.el6.codeit will be updated
    —> Package nginx.x86_64 1:1.16.1-1.el6.codeit will be an update
    —> Processing Dependency: libbrotli = 1:1.0.7 for package: 1:nginx-1.16.1-1.el6.codeit.x86_64
    —> Processing Dependency: libmaxminddb.so.0()(64bit) for package: 1:nginx-1.16.1-1.el6.codeit.x86_64
    —> Running transaction check
    —> Package libmaxminddb.x86_64 0:1.1.1-5.el6 will be installed
    —> Package nginx.x86_64 1:1.16.1-1.el6.codeit will be an update
    —> Processing Dependency: libbrotli = 1:1.0.7 for package: 1:nginx-1.16.1-1.el6.codeit.x86_64
    —> Finished Dependency Resolution
    Error: Package: 1:nginx-1.16.1-1.el6.codeit.x86_64 (CodeIT)
    Requires: libbrotli = 1:1.0.7
    Installed: 1:libbrotli-1.0.6-1.codeit.el6.x86_64 (@CodeIT)
    libbrotli = 1:1.0.6-1.codeit.el6
    Available: libbrotli-1.0.20160607.git.3f46e28-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160607.git.3f46e28-1.el6.codeit
    Available: libbrotli-1.0.20160907.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160907.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20160927.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20160927.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20161013.git.6b12316-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20161013.git.6b12316-1.el6.codeit
    Available: libbrotli-1.0.20161021.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20161021.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170201.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170201.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170227.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170227.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170418.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170418.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20170828.git.a258234-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20170828.git.a258234-1.el6.codeit
    Available: libbrotli-1.0.20171011.git.805fd3b-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1.0.20171011.git.805fd3b-1.el6.codeit
    Available: 1:libbrotli-1.0.4-1.el6.codeit.x86_64 (CodeIT)
    libbrotli = 1:1.0.4-1.el6.codeit
    You could try using —skip-broken to work around the problem
    You could try running: rpm -Va —nofiles —nodigest

  4. dnf update
    Última comprobación de caducidad de metadatos hecha hace 0:00:36, el vie 01 oct 2021 15:49:14 CEST.
    Dependencias resueltas.

    Problema: package nginx-1:1.16.1-1.el7.codeit.x86_64 requires libbrotlienc.so.1()(64bit), but none of the providers can be installed
    — package nginx-1:1.16.1-1.el7.codeit.x86_64 obsoletes libbrotli provided by libbrotli-1.0.9-1.codeit.el7.x86_64
    — cannot install both brotli-1.0.7-5.el7.x86_64 and brotli-1.0.9-1.codeit.el7.x86_64
    — cannot install the best update candidate for package libbrotli-1.0.9-1.codeit.el7.x86_64
    — cannot install the best update candidate for package brotli-1.0.9-1.codeit.el7.x86_64
    =============================================================================================================================================================================================
    Paquete Arquitectura Versión Repositorio Tamaño
    =============================================================================================================================================================================================
    Descartando paquetes con conflictos:
    (añada ‘—best —allowerasing’ a la linea de comandos para forzar su actualización):
    brotli x86_64 1.0.7-5.el7 epel 318 k
    Descartando paquetes con conflictos en las dependencias:
    nginx x86_64 1:1.16.1-1.el7.codeit CodeIT 3.5 M

    Resumen de la transacción
    =============================================================================================================================================================================================
    Descartar 2 Paquetes

    Nada por hacer.
    ¡Listo!

      1. I have not installed nginx, but apache

        # yum list installed | grep CodeIT
        apr.x86_64 1.7.0-2.el7 @CodeIT
        apr-devel.x86_64 1.7.0-2.el7 @CodeIT
        apr-util.x86_64 1.6.1-6.el7 @CodeIT
        apr-util-devel.x86_64 1.6.1-6.el7 @CodeIT
        brotli.x86_64 1.0.9-1.codeit.el7 @CodeIT
        httpd.x86_64 2.4.49-1.codeit.el7 @CodeIT
        httpd-filesystem.noarch 2.4.49-1.codeit.el7 @CodeIT
        httpd-tools.x86_64 2.4.49-1.codeit.el7 @CodeIT
        libbrotli.x86_64 1.0.9-1.codeit.el7 @CodeIT
        mc.x86_64 1:4.8.27-1.codeit.el7 @CodeIT
        mod_http2.x86_64 1.15.24-1.codeit @CodeIT
        mod_ssl.x86_64 1:2.4.49-1.codeit.el7 @CodeIT
        openssl111-libs.x86_64 1.1.1l-1.codeit.el7 @CodeIT
        # yum list installed | grep nginx
        none

        # yum list installed | grep epel
        certbot.noarch 1.11.0-1.el7 @epel
        epel-release.noarch 7-14 @epel
        htop.x86_64 2.2.0-3.el7 @epel
        jq.x86_64 1.6-2.el7 @epel
        libdb4.x86_64 4.8.30-13.el7 @epel
        libdb4-utils.x86_64 4.8.30-13.el7 @epel
        libmspack.x86_64 0.7-0.1.alpha.el7 @epel
        libnghttp2.x86_64 1.33.0-1.1.el7 @epel
        oniguruma.x86_64 6.8.2-1.el7 @epel
        python-ndg_httpsclient.noarch 0.3.2-1.el7 @epel
        python-requests-toolbelt.noarch 0.8.0-3.el7 @epel
        python-zope-component.noarch 1:4.1.0-5.el7 @epel
        python-zope-event.noarch 4.0.3-2.el7 @epel
        python2-acme.noarch 1.11.0-1.el7 @epel
        python2-certbot.noarch 1.11.0-1.el7 @epel
        python2-configargparse.noarch 0.11.0-2.el7 @epel
        python2-dialog.noarch 3.3.0-6.el7 @epel
        python2-distro.noarch 1.2.0-3.el7 @epel
        python2-future.noarch 0.18.2-2.el7 @epel
        python2-josepy.noarch 1.3.0-2.el7 @epel
        python2-mock.noarch 1.0.1-10.el7 @epel
        python2-parsedatetime.noarch 2.4-6.el7 @epel
        python2-pip.noarch 8.1.2-14.el7 @epel
        python2-psutil.x86_64 5.6.7-1.el7 @epel
        python2-pyrfc3339.noarch 1.1-3.el7 @epel
        python2-six.noarch 1.9.0-0.el7 @epel
        sscg.x86_64 2.6.1-1.el7 @epel

  5. I have problem on dnf update

    Problema: package nginx-1:1.16.1-1.el7.codeit.x86_64 requires libbrotlienc.so.1()(64bit), but none of the providers can be installed
    — package nginx-1:1.16.1-1.el7.codeit.x86_64 obsoletes libbrotli provided by libbrotli-1.0.9-1.codeit.el7.x86_64
    — cannot install both brotli-1.0.7-5.el7.x86_64 and brotli-1.0.9-1.codeit.el7.x86_64
    — cannot install the best update candidate for package libbrotli-1.0.9-1.codeit.el7.x86_64
    — cannot install the best update candidate for package brotli-1.0.9-1.codeit.el7.x86_64
    ===========================================================================================================================================================
    Paquete Arquitectura Versión Repositorio
    ===========================================================================================================================================================
    Descartando paquetes con conflictos:
    (añada ‘—best —allowerasing’ a la linea de comandos para forzar su actualización):
    brotli x86_64 1.0.7-5.el7 epel
    Descartando paquetes con conflictos en las dependencias:
    nginx x86_64 1:1.16.1-1.el7.codeit CodeIT

    Resumen de la transacción
    ===========================================================================================================================================================

Добавить комментарий для Alberto Отменить ответ

Ваш адрес email не будет опубликован. Обязательные поля помечены *