diff options
| author | Xe Iaso <me@christine.website> | 2022-10-29 15:24:37 -0400 |
|---|---|---|
| committer | Xe Iaso <me@christine.website> | 2022-10-29 15:24:37 -0400 |
| commit | af4dcc2191d81b96b8815c2255d26dfe3c604a24 (patch) | |
| tree | 0c19a3c92ab1428f4131f2a6a21d3113e167a029 | |
| parent | fe1b24e1431c77ad35bfa9804fa41d4769295ffb (diff) | |
| download | xesite-af4dcc2191d81b96b8815c2255d26dfe3c604a24.tar.xz xesite-af4dcc2191d81b96b8815c2255d26dfe3c604a24.zip | |
clarify relation to the OpenSSL vuln
Signed-off-by: Xe Iaso <me@christine.website>
| -rw-r--r-- | blog/nixos-nginx-openssl-1.x.markdown | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/blog/nixos-nginx-openssl-1.x.markdown b/blog/nixos-nginx-openssl-1.x.markdown index a5d4aa1..910339f 100644 --- a/blog/nixos-nginx-openssl-1.x.markdown +++ b/blog/nixos-nginx-openssl-1.x.markdown @@ -14,7 +14,11 @@ like override versions of packages so that you can customize what software is running on your computer. You can use this to manually patch programs, or alternatively override dependencies with other versions. Today I'm going to show you how to use an overlay to force NixOS to rebuild -[nginx](https://nginx.org/en/) with OpenSSL 1.1.1 instead of OpenSSL 3.x. +[nginx](https://nginx.org/en/) with OpenSSL 1.1.1 instead of OpenSSL 3.x. You +may want to do this if you want to reduce risks involved with the [CRITICAL +security issue announced for OpenSSL +3.x](https://xeiaso.net/blog/openssl-3.x-secvuln-incoming) (OpenSSL 1.1.1 isn't +listed as CRITICAL). <xeblog-conv name="Cadey" mood="coffee">This is not needed unless you run NixOS unstable or use the nginx package from NixOS unstable. If you use NixOS 22.05, |