Linux升级Nginx(由于用到openssl插件，随即把openssl到1.0.2o)

由于今天服务器漏洞扫描出Nginx有些安全漏洞需要升级Nginx版本随机对ningx进行升级。
Nginx官方网站：Nginx

1、查看Nginx编译信息

[zteesop@bossvm ~]$ /usr/local/nginx/sbin/nginx -V
nginx version: nginx/1.6.0
built by gcc 4.8.5 20150623 (Red Hat 4.8.5-36) (GCC) 
built with OpenSSL 1.0.2o  27 Mar 2018
TLS SNI support enabled
configure arguments: --prefix=/usr/local/nginx --with-threads 
--with-http_ssl_module --with-http_v2_module --with-http_realip_module
--with-http_stub_status_module --with-stream  --with-stream_ssl_module 
--add-module=../echo-nginx-module-master --add-module=../headers-more-nginx-module-master 
--add-module=../nginx-goodies-nginx-sticky-module-ng-08a395c66e42 
--add-module=../ngx_cache_purge-master --add-module=../ngx_http_substitutions_filter_module-master 
--with-openssl=../openssl-1.0.2o

2、停止Nginx进程并备份配置文件和启动单元

[zteesop@bossvm ~]$ kill $(ps -ef | grep nginx | grep master | awk -F" " '{print $2}')
[zteesop@bossvm ~]$ cp /usr/local/nginx/conf/nginx.conf /usr/local/nginx_bak/nginx.conf.20190717
[zteesop@bossvm ~]$ mv /usr/local/nginx/sbin/nginx /usr/local/nginx_bak/nginx.20190717

3、解压下载好的Nginx并进行编译

[zteesop@bossvm ~]$ tar -zxf nginx-1.17.1.tar.gz
[zteesop@bossvm ~]$ cd nginx-1.17.1
[zteesop@bossvm nginx-1.17.1]$ ./configure --prefix=/home/esopnginx/nginx --with-threads \
--with-http_ssl_module  --with-http_v2_module  \
--with-http_realip_module --with-http_stub_status_module \
--with-stream --with-stream_ssl_module \ 
--with-openssl=../openssl-1.0.2o \
--add-module=../echo-nginx-module-master \ 
--add-module=../headers-more-nginx-module-master \
--add-module=../nginx-goodies-nginx-sticky-module-ng-08a395c66e42 \
--add-module=../ngx_cache_purge-master \
--add-module=../ngx_http_substitutions_filter_module-master
[zteesop@bossvm nginx-1.17.1]$ make     **结束千万不要make install**   

注：当时提示了openssl版本不对随即升级openssl到指定版本，--add-moudule(添加模板)需要你把想要添加的模块下载到服务器上并解压好，直接通过模块名称进行百度搜索就能下载了。

4、复制启动单元到Nginx目录

[zteesop@bossvm nginx-1.17.1]$ cp ./objs/nginx /usr/local/nginx/sbin/nginx

升级openssl到openssl-1.0.2o

1、下载openssl-1.0.2o

wget https://www.openssl.org/source/openssl-1.0.2o.tar.gz

2、更新依赖包并解压安装

yum install zlib perl -y
tar zxf openssl-1.0.2o.tar.gz
cd openssl-1.0.2o
./config shared zlib && make && make install

3、备份openssl文件以免出问题回退

mv /usr/bin/openssl /usr/bin/openssl.bak
mv /usr/include/openssl /usr/include/openssl.bak

4、升级openssl

ln -s /usr/local/ssl/bin/openssl /usr/bin/openssl
ln -s /usr/local/ssl/include/openssl /usr/include/openssl
echo "/usr/local/ssl/lib" >> /etc/ld.so.conf
ldconfig -v

5、检查是否升级成功

openssl version -a