Welcome! Log In Create A New Profile


3rd party module move: nginx-openssl-version

Phil Pennock
August 13, 2019 03:16PM
This is about a third-party module: nginx-openssl-version
and its sudden new home.

Back when HeartBleed struck, I wrote an nginx module to provide for
configuration to be able to specify a minimum acceptable version of the
OpenSSL library and turn non-matches into fatal configuration errors,
trading off availability for security. I know that a few people started
using it. It's not massively popular, but it is used.

My employer at the time was Apcera and the module was published under
their GitHub repo. Apcera was purchased a few years ago, and today the
new owner suddenly closed all non-fork GitHub repos without notice.

A few people have forks; the code has not seen updates, but only because
it _works_ and hasn't needed changes. I still routinely build nginx
using this module. If there are further changes needed, then I will
make my changes available under the same (MIT) license.

Since I wrote the code in the first place, I think that I can get away
with decreeing that my GitHub fork is now the canonical home.


Replace `--add-module` references:
old: github.com/apcera/nginx-openssl-version
new: github.com/PennockTech/nginx-openssl-version

I will submit a wiki PR shortly.

Thanks for reading,
nginx mailing list
Subject Author Posted

3rd party module move: nginx-openssl-version

Phil Pennock August 13, 2019 03:16PM

Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 133
Record Number of Users: 6 on February 13, 2018
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready