Can tow different openssl versions be install on the same server?

jjason · 03-17-2017, 12:34 PM

Hello,
I been googling and cant really find the info that i looking for can two different open versions be installed on the same server.

I have a cPanel server that is already compiled with openssl 1.0.1e and everything is working but i also have a nginx server installed that is using a repo from a 3nd party to install the nginx server with a new version of openssl. I don't really trust the 3nd party repo and want to reinstall my server OS to have a clean install with cPanel and install the nginx server and the openssl from their source websites and compile the nginx server with a new version of openssl.

So my question is can i install a different openssl version in to it own folder and is only compiled with the nginx server? So that my nginx server don't use openssl 1.0.1e and use the other installed openssl 1.1.0e.

If this is possible how can i install it so that it's in it own folder and is not compiled with anything that cPanel is using. I already know the command to compile a openssl in the nginx install but don't know if openssl can be installed in it's own folder and is only used for the nginx server.

Can someone change the miss spelling in the subject to this please.
Can two different openssl versions be install on the same server?

r3sistance · 03-17-2017, 09:11 PM

Erm, cpanel doesn't support nginx (at least not yet)... also if you install nginx and leave it on default ports then you'll get huge headaches as EasyApache will try to use every available IP on the server... the one way I can think around this is to use an apache reverse proxy to the nginx instance, in which case you'd still have apache having to handle the SSL anyways. Well there is another option using PAT but either way you can't have nginx on port 80. Also as you're talking cPanel, I wouldn't mess around with installing too much stuff not supported by cPanel...

jjason · 03-17-2017, 09:34 PM

I have nginx installed in my server as the default server as a proxy server and listen to port 80 and 443 and apache is listening on port 8080 and 8443. The way it works is all traffic connects to the nxing server then that hands it off to the apache server to load the websites. You can install nginx on a cPanel server long as you configer it correctly and install these packages mod_rpaf and mod_remoteip for Apache and set the nginx to pass off the connections to apache but setting nginx conf port to apachy ports like it shown below.

Code:

proxy_pass $scheme://$PROXY_DOMAIN_OR_IP:$PROXY_TO_PORT;

and you would add this in the nginx http/https server conf file

Code:

set $PROXY_DOMAIN_OR_IP $host;
set $PROXY_TO_PORT 8080;

or

Code:

set $PROXY_DOMAIN_OR_IP $host;
set $PROXY_TO_PORT 8443;

Yes there is more to this to set it up but it can be done and i have it working on my server but with a 3nd party repo that installs the nginx server and compiles a new version of openSSL with it. But i want to get rid of the 3nd party repo and do it with the nginx and openssl sources from their websites.

You can see for your self that i have nginx install and being used in my cPanel server if you do a header check on this site my-hosted-website.com and the page will load with no problems.

cPanel can easily add nginx as a proxy server on top of the apache server and still be able to use EA3 or EA4 in WHM but they chose not to.

If there is a will there is a way in linux and there is a plugin you can get for free to install nginx in cPanel/WHM at https://engintron.com but it will compile the nginx to use the stuff that cPanel already installed like OpenSSL 1.0.1e

I wanted to make my own repo that installs the new versions of nginx and openssl and compile the new version of openssl with nginx. But i am not sure how to install a second openssl as a private openssl for nginx and compile it with it. I know well installing nginx i can use this command to compile the openssl to it.

Code:

./configure --with-http_ssl_module --with-openssl=/path/to/openssl-1.0.1e

I also been reading can i do something like this?

Code:

wget http://www.openssl.org/source/openssl-1.0.1g.tar.gz
tar -xzvf openssl-1.0.1g.tar.gz

Then when i run the nginx install i would do something like this and will it work?

Code:

./configure --with-http_ssl_module --with-openssl=/path/to/openssl-1.0.1g