nginx安装httphttp_ssl_module报错问题解决

问题：源码安装Openssl之后重新编译Nginx会报如下错误：

checking for OpenSSL library ... not found
checking for OpenSSL library in /usr/local/ ... not found
checking for OpenSSL library in /usr/pkg/ ... not found
checking for OpenSSL library in /opt/local/ ... not found

解决办法：

查看openssl当前版本：

[root@bestmem ~]# rpm -qa | grep openssl
openssl-libs-1.0.2k-16.el7.x86_64
openssl-1.0.2k-16.el7.x86_64
openssl-devel-1.0.2k-16.el7.x86_64

源码安装openssl-1.1.1:

[root@bestmem ~]# tar zxf openssl-1.1.1a.tar.gz -C /usr/local/
[root@bestmem ~]# cd /usr/local/openssl-1.1.1a/
[root@bestmem openssl-1.1.1a]# ./config --prefix=/usr/local/openssl --openssldir=/usr/local/ssl shared
[root@bestmem openssl-1.1.1a]# make && make install
[root@bestmem openssl-1.1.1a]# ln -s /usr/local/openssl/bin/openssl /usr/local/bin/openssl	#创建openssl命令链接

–prefix：指定安装目录
–openssldir：指定openssl配置文件路径
–shared：创建动态链接库
至于为什么不需卸载rpm包安装的openssl-1.0.2，而直接安装openssl-1.1.0的原因如下:

[root@bestmem openssl-1.1.1a]# which openssl			#rpm包所安装的openssl，其二进制文件位置
/usr/bin/openssl
[root@bestmem openssl-1.1.1a]# echo $PATH				#PATH环境变量加载路径顺序，/usr/local/bin查询在前
/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/root/bin

重启终端后，加载新的环境变量。

[root@bestmem ~]# which openssl
/usr/local/bin/openssl
[root@bestmem ~]# openssl version
openssl: error while loading shared libraries: libssl.so.1.1: cannot open shared object file: No such file or directory

#创建对应的库文件链接即可
[root@bestmem ~]# ln -s /usr/local/openssl/lib/libssl.so.1.1 /usr/lib64/libssl.so.1.1
[root@bestmem ~]# openssl version
openssl: error while loading shared libraries: libcrypto.so.1.1: cannot open shared object file: No such file or directory
[root@bestmem ~]# ln -s /usr/local/openssl/lib/libcrypto.so.1.1 /usr/lib64/libcrypto.so.1.1
[root@bestmem ~]# openssl version
OpenSSL 1.1.1a  27 Mar 2020

若编译nginx，–with-openssl=/usr/local/openssl-1.1.1a即可。

在nginx解压包的目录下，./configure --prefix=/usr/local/nginx --with-http_ssl_module --with-openssl=/usr/local/openssl-1.1.1a

make

./nginx -V

源码包下载地址：https://www.openssl.org/source/openssl-1.1.1a.tar.gz

https://blog.csdn.net/turnaroundfor/article/details/86076214

http://www.mamicode.com/info-detail-3022001.html