AIX Open Source

 View Only
  • 1.  nginx and TLS 1.3 support

    Posted Thu April 21, 2022 06:07 AM
    Hi Team.

    I was wondering if there are plans to compile nginx with TLS 1.3 support in the near future?
    Currently, I note that the required version of Openssl >1.1.1 and the required version of nginx >1.13 are both available on AIX.
    However, the current version of nginx compiled (1.21.4) is compiled against Openssl 1.0.2t, which doesn't support TLS 1.3

    Thank you.

    Regards,
    Pumynt

    ------------------------------
    Pumynt Chooboonraj
    Solution Architect
    Sphere Grouppe Pty Ltd
    Melbourne VIC
    ------------------------------


  • 2.  RE: nginx and TLS 1.3 support

    Posted Mon April 25, 2022 02:12 PM
    We are discussing a plan to move to openssl 1.1.1.
    This will require to build packages and also this will impose dependencies for users to move to openssl 1.1.1
    This move will start in phases and as and when we will update a package to newer level we will start using openssl 1.1.1

    ------------------------------
    SANKET RATHI
    ------------------------------



  • 3.  RE: nginx and TLS 1.3 support

    Posted Tue May 17, 2022 11:44 AM
    Thank you Sanket.

    I hadn't realized that would be a problem as AIX 7.2 ships with OpenSSL >1.1.1 but for older versions of AIX, I can totally see that being an issue if the link is against a version of OpenSSL that isn't there when interop with other packages.

    Appreciate your help, hopefully we can get TLS 1.3 soon, as while NGINX is the one I am looking for, I assume there are other applications in the toolbox that is relying on OpenSSL that will probably need/want TLS 1.3 soon as well.

    ------------------------------
    Pumynt Chooboonraj
    Solution Architect
    Sphere Grouppe Pty Ltd
    Melbourne VIC
    ------------------------------



  • 4.  RE: nginx and TLS 1.3 support

    Posted Mon August 22, 2022 12:25 PM
    We have published nginx and php built against openssl 1.1.1.
    You can install latest nginx and php from AIX toolbox but before that you will have to install openssl 1.1.1 from AIX web download.

    ------------------------------
    SANKET RATHI
    ------------------------------