KutuKupret colorful website
No CommentsBy default centos 5.x has openssl-0.9.8e which is not have tls extention for sni support. this is workaround on how to get nginx 0.8.48 rpm with TLS SNI enabled
Step 1:
download openssl source, example openssl-0.9.8l. extract it in /usr/src
$ cd /usr/src $ wget http://www.openssl.org/source/openssl-0.9.8l.tar.gz $ tar xvzf openssl-0.9.8l.tar.gz
Step 2:
Download nginx rpm source, example nginx-0.8.49-1.el5.src.rpm
$ wget http://centos.alt.ru/pub/nginx/0.8/RHEL/SRPMS/nginx-0.8.49-1.el5.src.rpm $ rpm -Uvh nginx-0.8.49-1.el5.src.rpm
Move to directory where the spec file is in and edit nginx.spec
$ cd /path/to/rpm/SPECS/ $ vi nginx.spec
Date: 3 Nov 2005
Author: Daniel Stenberg
License: freely available to do whatever you want with.
roundrobin.c – test the round robin DNS features of the resolver functions
Note: this test script is written to be compiled and run on Linux. It is
not as portable as it could be, but that is just to make it a simpler test
case.
$ gcc roundrobin.c
This source snippet resolves a name with multiple IP addresses and prints them out in the order the addresses were returned by the resolving function. It first uses getaddrinfo() (called GAI) and then gethostbyname() (called GHBN).
On my three test machines they both show the same sympthoms:
The GAI list is a lot less “random” than the GHBN one. The GAI list almost always returns the same first entry on repeated invokes (while the subsequent entries comes somewhat more random). The GHBN list is returned in a much more random fashion.
The test machines are all running Debian Unstable glibc 2.3.5
What this program does:
It runs N resolves of a given host names. It stores the order it gets the returned addresses. When all N resolves are done, it checks how the returned addresses were distributed. The procedure is first done with GAI and then with GHBN. The output is presented in list index order. That means: ‘index 0’ is the first address in the returned list and ‘index 1’ is the second address and so on. We have found out that in the GAI case you very often get 100% of the same address in index 0.
We have three hosts names that resolves to multiple IP addresses:
bad2.haxx.se bad10.haxx.se bad11.haxx.se
As you will see, none of them resolves any sensible data for other purposes
than resolve tests or similar.
Here is a simple example of a hello world program for FastCGI written in C. Before you can compile this, you will need to install the FastCGI devkit. At the time of writing the latest version is available from www.fastcgi.com
extract, compile and install fcgi-current.tar.gz
$ tar xvzf fcgi-current.tar.gz $ cd fcgi-2.x.x/ $ ./configure $ make $ sudo make install
the c code
#include <fcgi_stdio.h>
int main( int argc, char *argv[] )
{
while( FCGI_Accept() >= 0 ) {
printf( "Content-Type: text/plain\n\n" );
printf( "Hello world in C\n" );
}
return 0;
}