On 17.09.2023 11:28, Revvy wrote:
>
> $ uname -a
> Linux toronto-srv-03 6.1.0-12-amd64 #1 SMP PREEMPT_DYNAMIC Debian
> 6.1.52-1 (2023-09-07) x86_64 GNU/Linux
>
> $ lsb_release -a
> No LSB modules are available.
> Distributor ID: Debian
> Description:    Debian GNU/Linux 12 (bookworm)
> Release:        12
> Codename:       bookworm
>
> $ /sbin/nginx -V
> nginx version: nginx/1.24.0
> built by gcc 10.2.1 20210110 (Debian 10.2.1-6)
> built with OpenSSL 1.1.1n  15 Mar 2022
> TLS SNI support enabled
> configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx
> --modules-path=/usr/lib/nginx/modules
> --conf-path=/etc/nginx/nginx.conf
> --error-log-path=/var/log/nginx/error.log
> --http-log-path=/var/log/nginx/access.log
> --pid-path=/var/run/nginx.pid --lock-path=/var/run/nginx.lock
> --http-client-body-temp-path=/var/cache/nginx/client_temp
> --http-proxy-temp-path=/var/cache/nginx/proxy_temp
> --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp
> --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp
> --http-scgi-temp-path=/var/cache/nginx/scgi_temp --user=nginx
> --group=nginx --with-compat --with-file-aio --with-threads
> --with-http_addition_module --with-http_auth_request_module
> --with-http_dav_module --with-http_flv_module
> --with-http_gunzip_module --with-http_gzip_static_module
> --with-http_mp4_module --with-http_random_index_module
> --with-http_realip_module --with-http_secure_link_module
> --with-http_slice_module --with-http_ssl_module
> --with-http_stub_status_module --with-http_sub_module
> --with-http_v2_module --with-mail --with-mail_ssl_module --with-stream
> --with-stream_realip_module --with-stream_ssl_module
> --with-stream_ssl_preread_module --with-cc-opt='-g -O2
> -ffile-prefix-map=/data/builder/debuild/nginx-1.24.0/debian/debuild-base/nginx-1.24.0=.
> -fstack-protector-strong -Wformat -Werror=format-security
> -Wp,-D_FORTIFY_SOURCE=2 -fPIC' --with-ld-opt='-Wl,-z,relro -Wl,-z,now
> -Wl,--as-needed -pie'
>
> $ openssl version
> OpenSSL 3.0.9 30 May 2023 (Library: OpenSSL 3.0.9 30 May 2023)
>
> I think I see the problem now. I am using Debian /bookworm/ and the
> official nginx repos for Debian /bookworm/.
>
> $ cat /etc/apt/sources.list.d/nginx.list
> deb [signed-by=/usr/share/keyrings/nginx-archive-keyring.gpg]
> http://nginx.org/packages/debian bookworm nginx
>
> That version is built with OpenSSL 1.1.1n and the updated Debian
> bookworm version is OpenSSL 3.0.9. Is that the problem?
>
>
Yes, this looks like the reason for a problem .


> Another thing I should have mentioned is this issue only popped up
> after I upgraded the nginx-module-njs and nginx packages, the same
> configuration was working fine before.
>
>
Can you, please, share the current version of njs packet  and the
version you used before?


> On 9/17/23 12:28, Dmitry Volyntsev wrote:
>>
>> On 17.09.2023 06:39, Revvy via nginx wrote:
>>> Sep 17 13:36:52 toronto-srv-03 nginx[127394]: nginx: [emerg]
>>> dlopen() "/etc/nginx/modules/ngx_http_js_module.so" failed
>>> (/etc/nginx/modules/ngx_http_js_module.so: undefined symbol:
>>> EVP_PKEY_CTX_set1_hkdf_salt) in /etc/nginx/nginx.conf:4
>>>
>>>
>>
>> Hi Revvy,
>>
>> Can you please share your operation system details (name, version)
>> and the output of the following command: nginx -V. Also, I would like
>> to know the OpenSSL library you are using.
>>
_______________________________________________
nginx mailing list
nginx@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx