Build configurations: Porovnání verzí
Skočit na navigaci
Skočit na vyhledávání
(→With LUA module - openssl) |
|||
(Nejsou zobrazeny 2 mezilehlé verze od stejného uživatele.) | |||
Řádek 7: | Řádek 7: | ||
==== With LUA module - openssl ==== | ==== With LUA module - openssl ==== | ||
<source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module --with-http_perl_module --with-http_degradation_module --with-openssl=../boringssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --add-module=../set-misc-nginx-module-0.31/ --with-openssl-opt=enable-tls1_3</source> | <source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module --with-http_perl_module --with-http_degradation_module --with-openssl=../boringssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --add-module=../set-misc-nginx-module-0.31/ --with-openssl-opt=enable-tls1_3</source> | ||
+ | |||
+ | ==== BoringSSL ==== | ||
+ | <source lang="bash">mkdir build | ||
+ | cd build/ | ||
+ | cmake .. | ||
+ | make | ||
+ | BUILDROOT=/root/build | ||
+ | mkdir -p "$BUILDROOT/boringssl/.openssl/lib" | ||
+ | cd "$BUILDROOT/boringssl/.openssl" | ||
+ | ln -s ../include include | ||
+ | cd "$BUILDROOT/boringssl" | ||
+ | cp "build/crypto/libcrypto.a" ".openssl/lib" | ||
+ | cp "build/ssl/libssl.a" ".openssl/lib" | ||
+ | touch "$BUILDROOT/boringssl/.openssl/include/openssl/ssl.h"</source> | ||
+ | |||
+ | ==== MITM ==== | ||
+ | <source lang="bash">CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_sub_module --with-http_gzip_static_module --with-http_degradation_module --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --with-cc-opt="-I /usr/include/luajit-2.0"</source> |
Aktuální verze z 21. 5. 2019, 10:36
Nginx
./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl
With LUA module
CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2 -I ../openssl/.openssl/include/" --with-ld-opt="-L ../boringssl/.openssl/lib" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module --with-http_perl_module --with-http_degradation_module --with-openssl=../openssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/
With LUA module - openssl
CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_image_filter_module --with-http_sub_module --with-http_gzip_static_module --with-http_perl_module --with-http_degradation_module --with-openssl=../boringssl --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --add-module=../set-misc-nginx-module-0.31/ --with-openssl-opt=enable-tls1_3
BoringSSL
mkdir build
cd build/
cmake ..
make
BUILDROOT=/root/build
mkdir -p "$BUILDROOT/boringssl/.openssl/lib"
cd "$BUILDROOT/boringssl/.openssl"
ln -s ../include include
cd "$BUILDROOT/boringssl"
cp "build/crypto/libcrypto.a" ".openssl/lib"
cp "build/ssl/libssl.a" ".openssl/lib"
touch "$BUILDROOT/boringssl/.openssl/include/openssl/ssl.h"
MITM
CC="gcc -march=native" ./configure --prefix=/opt/nginx --with-http_ssl_module --with-http_v2_module --with-http_realip_module --with-http_addition_module --with-http_auth_request_module --with-http_random_index_module --with-http_stub_status_module --with-cc-opt="-O2 -march=native -D_FORTIFY_SOURCE=2" --error-log-path=/var/log/nginx/error.log --lock-path=/var/lock/nginx.lock --pid-path=/run/nginx.pid --http-client-body-temp-path=/var/lib/nginx/body --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --http-proxy-temp-path=/var/lib/nginx/proxy --http-scgi-temp-path=/var/lib/nginx/scgi --http-uwsgi-temp-path=/var/lib/nginx/uwsgi --with-pcre-jit --with-http_auth_request_module --with-http_dav_module --with-http_geoip_module --with-http_gzip_static_module --with-http_sub_module --with-http_gzip_static_module --with-http_degradation_module --add-module=../ngx_devel_kit/ --add-module=../lua-nginx-module/ --add-module=../ngx-fancyindex/ --add-module=../ngx_brotli/ --with-cc-opt="-I /usr/include/luajit-2.0"