openrestry受nginx cve-2021-23017漏洞影响吗

    会有影响, openrestry 将在近期发布针对修复版本。

      6 days later
      13 days later

      objs/addon/src/ngx_http_lua_ssl_certby.o: In function ngx_http_lua_ffi_ssl_verify_client':
      /apps/openresty-1.19.3.2/build/nginx-1.19.3/../ngx_lua-0.10.19/src/ngx_http_lua_ssl_certby.c:1452: undefined reference to
      SSL_set0_verify_cert_store'
      objs/addon/src/ngx_stream_lua_ssl_certby.o: In function ngx_stream_lua_ffi_ssl_verify_client':
      /apps/openresty-1.19.3.2/build/nginx-1.19.3/../ngx_stream_lua-0.0.9/src/ngx_stream_lua_ssl_certby.c:1473: undefined reference to
      SSL_set0_verify_cert_store'
      collect2: ld returned 1 exit status
      make[2]: *** [objs/nginx] Error 1
      make[2]: Leaving directory /home/deployer/tianyan/apps/openresty-1.19.3.2/build/nginx-1.19.3'
      make[1]: *** [build] Error 2
      make[1]: Leaving directory
      /home/deployer/tianyan/apps/openresty-1.19.3.2/build/nginx-1.19.3'
      make: *** [all] Error 2

      安装新版本,报这个错,请问下怎么解决呢

      5 days later

      xiaocang
      通过yum info openssl命令查到的版本Version: 1.0.1e 通过openssl version命令查到的是OpenSSL 1.1.1h 22 Sep 2020

      5 days later

      xnq 这个函数从 OpenSSL 1.0.2 就引入了,应该是编译时的参数有问题。
      麻烦贴一下编译参数

      • xnq replied to this.

        xiaocang
        ./configure --prefix=/home/deployer/openresty-1.19.3.2 --with-luajit --without-http_redis2_module --with-http_iconv_module --with-http_stub_status_module
        谢谢

          Write a Reply...