Can't get SPDY working with OpenSSL 1.0.1e

Server NGINX
1

Hi,

I simply read every article on the net, followed the docs but simply
can’t
get SPDY support working.

It’s running on Debian Squeeze (that I have to) so I upgraded OpenSSL to
the version 1.0.1e from Wheezy repo. Downloaded the latest stable Nginx
1.4.2 then compiled with the configuration options:

./configure
–with-ipv6
–with-http_ssl_module
–with-http_spdy_module
–with-http_gzip_static_module
–with-http_geoip_module

Configuration summary

  • using system PCRE library
  • using system OpenSSL library
  • md5: using OpenSSL library
  • sha1: using OpenSSL library
  • using system zlib library

Please note that it’s listening on “IP:443 ssl spdy” as the server has
more
than one IP and SSL running websites. SSL works fine and compiling
didn’t
complain about anything at all.

/usr/local/nginx/sbin/nginx -V

nginx version: nginx/1.4.2
built by gcc 4.4.5 (Debian 4.4.5-8)
TLS SNI support enabled
configure arguments: --with-ipv6 --with-http_ssl_module
–with-http_spdy_module --with-http_gzip_static_module
–with-http_geoip_module

Well, I get the warning message on boot:

Starting nginx: nginx: [warn] nginx was built without OpenSSL NPN
support,
SPDY is not enabled for xxxx.

Any help is much appreciated.
Roy

2

On Tuesday 30 July 2013 17:51:21 kirpit wrote:

–with-ipv6 \

  • using system zlib library
    –with-http_spdy_module --with-http_gzip_static_module
    –with-http_geoip_module

Well, I get the warning message on boot:

Starting nginx: nginx: [warn] nginx was built without OpenSSL NPN support,
SPDY is not enabled for xxxx.

Any help is much appreciated.

You have upgraded OpenSSL binary, but its headers are still from the old
version. Please look at the libssl-dev package to ensure that its
version
is in sync with your openssl.

wbr, Valentin V. Bartenev

–
http://nginx.org/en/donation.html

3

This was quite tricky!

apt-show-versions libssl-dev

libssl-dev/wheezy upgradeable from 0.9.8o-4squeeze14 to 1.0.1e-2

Thanks a lot for the help mate.

4

Hi.
If you compile nginx yourself, its not necessary to update system
libraries
You can use openssl 1.0.1 source and use
–with-openssl=/var/tmp/openssl-1.0.1e
switch to configure options, where folder is the path where you unpacked
the
source,
nginx will configure and compile openssl as static library while
building
nginx and then will link it into nginx

~GL

Posted at Nginx Forum: