On Wed, Sep 16, 2009 at 12:16:55PM -0400, xmichielx wrote:

> Hi Igor,
>
> I got this problem with the repostiroy ubuntu 8.04 is offering me.
> I used the old 0.5.* version but it is lacking a lot of features..so then I installed the backported nginx version but that is lacking the enable-tlsext.
> How can I find out if the old debian ubuntu 8.04 hardy package is using the enable-tlsext option? (but lacking other features) the one at: http://packages.ubuntu.com/hardy/nginx ?

The attached patch does not stop nginx, now nginx will issue warning:
"nginx has linked dynamically to an OpenSSL library which was built
without tlsext support".


--
Igor Sysoev
http://sysoev.ru/en/
Index: src/http/modules/ngx_http_ssl_module.c
===================================================================
--- src/http/modules/ngx_http_ssl_module.c (revision 2459)
+++ src/http/modules/ngx_http_ssl_module.c (working copy)
@@ -406,9 +406,9 @@
ngx_http_ssl_servername)
== 0)
{
- ngx_ssl_error(NGX_LOG_EMERG, cf->log, 0,
- "SSL_CTX_set_tlsext_servername_callback() failed");
- return NGX_CONF_ERROR;
+ ngx_log_error(NGX_LOG_WARN, cf->log, 0,
+ "nginx has linked dynamically to an OpenSSL library "
+ "which was built without tlsext support");
}

#endif