lnmp 1.3 可https访问，但无法开启http/2

loren

Chrome 宣布 Chrome 将在5月15日停止支持 TLS 协议扩展 NPN （Next Protocol Negotiation）。NPN 已经被 ALPN (Application-Layer Protocol Negotiation) 替代。

不知道CENTOS会不会一并升级，我先用SPDY凑合用。

fscar

升级 设定了n天还是不行
等待 军哥的正确教学 谢谢
lnmp1.1，HTTP/2官方的方法

loren

make -f objs/Makefile
make[1]: Entering directory `/root/lnmp1.3-full/src/nginx-1.9.12'
cd /usr/local/ssl \
&& if [ -f Makefile ]; then make clean; fi \
&& ./config --prefix=/usr/local/ssl/.openssl no-shared  \
&& make \
&& make install_sw LIBDIR=lib
/bin/sh: line 2: ./config: No such file or directory
make[1]: *** [/usr/local/ssl/.openssl/include/openssl/ssl.h] Error 127
make[1]: Leaving directory `/root/lnmp1.3-full/src/nginx-1.9.12'
make: *** [build] Error 2
cp: cannot stat 鈥榦bjs/nginx鈥 No such file or directory
Test nginx configure file...
include/upgrade_nginx.sh: line 58: /usr/local/nginx/sbin/nginx: No such file or directory
upgrade...
/usr/local/nginx/sbin/nginx -t
make: /usr/local/nginx/sbin/nginx: Command not found
make: *** [upgrade] Error 127
======== upgrade nginx completed ======
Program will display Nginx Version......
include/upgrade_nginx.sh: line 65: /usr/local/nginx/sbin/nginx: No such file or directory

按照  https://yusky.me/centos-openssl-updateed-1-0-1g.html  这个办法，升级最新的openssl 1.0.2g，然后
lnmp 1.3修改Nginx_Modules_Options='' ，引号中加上--with-openssl=/usr/local/ssl，之后重启，然后升级nginx，结果报以上错误。之后无法启动了。

[[i] 本帖最后由 loren 于 2016-3-9 22:50 编辑 [/i]]

fscar

升级成功 再来呢?
root@ns2:~# /usr/local/nginx/sbin/nginx -V
nginx version: nginx/1.9.5
built by gcc 4.8.4 (Ubuntu 4.8.4-2ubuntu1~14.04.1)
built with OpenSSL 1.0.1f 6 Jan 2014
TLS SNI support enabled
configure arguments: --user=www --group=www --prefix=/usr/local/nginx --with-http_stub_status_module --with-http_ssl_module --with-http_v2_module --with-http_gzip_static_module --with-ipv6 --with-http_sub_module --with-ld-opt='-ljemalloc'

licess

前面12楼和你说了完整步骤，又去找别人的教程弄。。。
要发日志就需要完整的日志

licess

成功了

loren

[root@li713-98 lnmp1.3-full]# ./upgrade.sh nginx
+-----------------------------------------------------------------------+
|            Upgrade script for LNMP V1.2, Written by Licess            |
+-----------------------------------------------------------------------+
|     A tool to upgrade Nginx,MySQL/Mariadb,PHP for LNMP/LNMPA/LAMP     |
+-----------------------------------------------------------------------+
|          For more information please visit http://www.lnmp.org        |
+-----------------------------------------------------------------------+
Current Nginx Version:1.8.1
You can get version number from http://nginx.org/en/download.html
Please enter nginx version you want, (example: 1.7.8): 1.9.12
+---------------------------------------------------------+
|    You will upgrade nginx version to 1.9.12
+---------------------------------------------------------+

Press any key to start...or Press Ctrl+c to cancel
============================check files==================================
Notice: nginx-1.9.12.tar.gz not found!!!download now......
--2016-03-10 15:13:03--  http://nginx.org/download/nginx-1.9.12.tar.gz
Resolving nginx.org (nginx.org)... 2606:7100:1:69::3f, 2001:1af8:4060:a004:21::e3, 95.211.80.227, ...
Connecting to nginx.org (nginx.org)|2606:7100:1:69::3f|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 899183 (878K) [application/octet-stream]
Saving to: 鈥榥ginx-1.9.12.tar.gz鈥

100%[======================================>] 899,183      593KB/s   in 1.5s   

2016-03-10 15:13:05 (593 KB/s) - 鈥榥ginx-1.9.12.tar.gz鈥saved [899183/899183]

Download nginx-1.9.12.tar.gz successfully!
============================check files==================================
Uncompress nginx-1.9.12.tar.gz...
cd nginx-1.9.12...
checking for OS
+ Linux 4.1.5-x86_64-linode61 x86_64
checking for C compiler ... found
+ using GNU C compiler
+ gcc version: 4.8.5 20150623 (Red Hat 4.8.5-4) (GCC)
checking for gcc -pipe switch ... found
checking for -Wl,-E switch ... found
checking for gcc builtin atomic operations ... found
checking for C99 variadic macros ... found
checking for gcc variadic macros ... found
checking for gcc builtin 64 bit byteswap ... found
checking for unistd.h ... found
checking for inttypes.h ... found
checking for limits.h ... found
checking for sys/filio.h ... not found
checking for sys/param.h ... found
checking for sys/mount.h ... found
checking for sys/statvfs.h ... found
checking for crypt.h ... found
checking for Linux specific features
checking for epoll ... found
checking for EPOLLRDHUP ... found
checking for O_PATH ... found
checking for sendfile() ... found
checking for sendfile64() ... found
checking for sys/prctl.h ... found
checking for prctl(PR_SET_DUMPABLE) ... found
checking for sched_setaffinity() ... found
checking for crypt_r() ... found
checking for sys/vfs.h ... found
checking for poll() ... found
checking for /dev/poll ... not found
checking for kqueue ... not found
checking for crypt() ... not found
checking for crypt() in libcrypt ... found
checking for F_READAHEAD ... not found
checking for posix_fadvise() ... found
checking for O_DIRECT ... found
checking for F_NOCACHE ... not found
checking for directio() ... not found
checking for statfs() ... found
checking for statvfs() ... found
checking for dlopen() ... not found
checking for dlopen() in libdl ... found
checking for sched_yield() ... found
checking for SO_SETFIB ... not found
checking for SO_REUSEPORT ... found
checking for SO_ACCEPTFILTER ... not found
checking for TCP_DEFER_ACCEPT ... found
checking for TCP_KEEPIDLE ... found
checking for TCP_FASTOPEN ... found
checking for TCP_INFO ... found
checking for accept4() ... found
checking for eventfd() ... found
checking for int size ... 4 bytes
checking for long size ... 8 bytes
checking for long long size ... 8 bytes
checking for void * size ... 8 bytes
checking for uint64_t ... found
checking for sig_atomic_t ... found
checking for sig_atomic_t size ... 4 bytes
checking for socklen_t ... found
checking for in_addr_t ... found
checking for in_port_t ... found
checking for rlim_t ... found
checking for uintptr_t ... uintptr_t found
checking for system byte ordering ... little endian
checking for size_t size ... 8 bytes
checking for off_t size ... 8 bytes
checking for time_t size ... 8 bytes
checking for AF_INET6 ... found
checking for setproctitle() ... not found
checking for pread() ... found
checking for pwrite() ... found
checking for pwritev() ... found
checking for sys_nerr ... found
checking for localtime_r() ... found
checking for posix_memalign() ... found
checking for memalign() ... found
checking for mmap(MAP_ANON|MAP_SHARED) ... found
checking for mmap("/dev/zero", MAP_SHARED) ... found
checking for System V shared memory ... found
checking for POSIX semaphores ... not found
checking for POSIX semaphores in libpthread ... found
checking for struct msghdr.msg_control ... found
checking for ioctl(FIONBIO) ... found
checking for struct tm.tm_gmtoff ... found
checking for struct dirent.d_namlen ... not found
checking for struct dirent.d_type ... found
checking for sysconf(_SC_NPROCESSORS_ONLN) ... found
checking for openat(), fstatat() ... found
checking for getaddrinfo() ... found
checking for PCRE library ... found
checking for PCRE JIT support ... found
checking for zlib library ... found
creating objs/Makefile

Configuration summary
  + using system PCRE library
  + using OpenSSL library: /usr/local/openssl
  + md5: using OpenSSL library
  + sha1: using OpenSSL library
  + using system zlib library

  nginx path prefix: "/usr/local/nginx"
  nginx binary file: "/usr/local/nginx/sbin/nginx"
  nginx modules path: "/usr/local/nginx/modules"
  nginx configuration prefix: "/usr/local/nginx/conf"
  nginx configuration file: "/usr/local/nginx/conf/nginx.conf"
  nginx pid file: "/usr/local/nginx/logs/nginx.pid"
  nginx error log file: "/usr/local/nginx/logs/error.log"
  nginx http access log file: "/usr/local/nginx/logs/access.log"
  nginx http client request body temporary files: "client_body_temp"
  nginx http proxy temporary files: "proxy_temp"
  nginx http fastcgi temporary files: "fastcgi_temp"
  nginx http uwsgi temporary files: "uwsgi_temp"
  nginx http scgi temporary files: "scgi_temp"

make -f objs/Makefile
make[1]: Entering directory `/root/lnmp1.3-full/src/nginx-1.9.12'
cd /usr/local/openssl \
&& if [ -f Makefile ]; then make clean; fi \
&& ./config --prefix=/usr/local/openssl/.openssl no-shared  \
&& make \
&& make install_sw LIBDIR=lib
/bin/sh: line 2: ./config: No such file or directory
make[1]: *** [/usr/local/openssl/.openssl/include/openssl/ssl.h] Error 127
make[1]: Leaving directory `/root/lnmp1.3-full/src/nginx-1.9.12'
make: *** [build] Error 2
cp: cannot stat 鈥榦bjs/nginx鈥 No such file or directory
Test nginx configure file...
include/upgrade_nginx.sh: line 58: /usr/local/nginx/sbin/nginx: No such file or directory
upgrade...
/usr/local/nginx/sbin/nginx -t
make: /usr/local/nginx/sbin/nginx: Command not found
make: *** [upgrade] Error 127
======== upgrade nginx completed ======
Program will display Nginx Version......
include/upgrade_nginx.sh: line 65: /usr/local/nginx/sbin/nginx: No such file or directory
[root@li713-98 lnmp1.3-full]#

不知道编译哪里出了问题，我是如下步骤升级OPENSSL的
下载最新版本的openssl源码包wget http://www.openssl.org/source/openssl-1.0.2g.tar.gz
安装openssltar -zxf openssl-1.0.2g.tar.gz  cd openssl-1.0.2g  ./config --prefix=/usr/local/openssl shared zlib makemake installmv /usr/bin/openssl /usr/bin/openssl.OFFmv /usr/include/openssl /usr/include/openssl.OFFln –s /usr/local/openssl/bin/openssl /usr/bin/opensslln –s /usr/local/openssl/include/openssl /usr/include/openssl
配置库文件搜索路径echo "/usr/local/openssl/lib" >> /etc/ld.so.confldconfig –v
查看openssl版本号，验证安装正确性openssl version –a

[[i] 本帖最后由 loren 于 2016-3-10 15:18 编辑 [/i]]

licess

建议你还是继续再阅读12楼吧，没让你去编译openssl

fscar

照著作 就会成功 军哥 写的真棒
https://www.vpser.net/build/letsencrypt-free-ssl.html#more-5273