Nginx/OpenSSL within Jail

[KevDog]

Hi, I think I have an issue with OpenSSL within FreeNAS freebsd jail.

My FreeNAS version is 11.3 Release
My jails have been updated to use 11.3-RELEASE-p5 as the base

I'm installed nginx and openssl from pkg within the jail. The openssl version from pkg is installed within /usr/local/bin/openssl.
The pkg version is OpenSSL 1.1.1e 17 Mar 2020

There is another version of OpenSSL installed within /usr/bin/openssl.
The jail version is OpenSSL 1.0.2s-freebsd 28 May 2019

How do I make my nginx use my more recent version of openssl rather than the older version?

 

[millst]

I think you're at the mercy of the package maintainer. I've got some internal use only jails with nginx-1.16.1 and see that it was built against 1.0.2s. Not sure if the nginx-devel-1.17 package is any better. You could build your own. That's what I do for my main web server.

 

[Jailer]

How do I make my nginx use my more recent version of openssl rather than the older version?

You install nginx from the port and use DEFAULT_VERSIONS+=ssl=openssl in your make file before you install it.