Answer the question
In order to leave comments, you need to log in
Mikrotik -> OpenWRT -> Nginx + SSL-> how to raise SSL?
Good afternoon
In general, there was such a task - to raise an HTTPS server in a small town, for rare responses to requests.
Of the available pieces of iron in that city - only Mikrotik.
Through MetaRouter, an OpenWRT image was raised, standard NGINX was configured, PHP was screwed.
But when I started setting up SSL, it turned out that the nginx assembly was built without the --with-http_ssl_module key
nginx -V
nginx version: nginx/1.2.8
built by gcc 4.5.4 20110808 (prerelease) (Linaro GCC 4.5-2011.08)
configure arguments: --crossbuild=Linux::mips --prefix=/usr --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --pid-path=/var/run/nginx.pid --lock-path=/var/lock/nginx.lock --http-log-path=/var/log/nginx/access.log --http-client-body-temp-path=/var/lib/nginx/body --http-proxy-temp-path=/var/lib/nginx/proxy --http-fastcgi-temp-path=/var/lib/nginx/fastcgi --with-cc=mips-openwrt-linux-uclibc-gcc --with-cc-opt='-I/home/roman/mikrotik/trunk/staging_dir/target-mips_uClibc-0.9.32/usr/include -I/home/roman/mikrotik/trunk/staging_dir/target-mips_uClibc-0.9.32/include -I/home/roman/mikrotik/trunk/staging_dir/toolchain-mips_gcc-4.5-linaro_uClibc-0.9.32/usr/include -I/home/roman/mikrotik/trunk/staging_dir/toolchain-mips_gcc-4.5-linaro_uClibc-0.9.32/include -Os -pipe -mips32 -mtune=mips32 -fno-caller-saves -fhonour-copts -msoft-float' --with-ld-opt='-L/home/roman/mikrotik/trunk/staging_dir/target-mips_uClibc-0.9.32/usr/lib -L/home/roman/mikrotik/trunk/staging_dir/target-mips_uClibc-0.9.32/lib -L/home/roman/mikrotik/trunk/staging_dir/toolchain-mips_gcc-4.5-linaro_uClibc-0.9.32/usr/lib -L/home/roman/mikrotik/trunk/staging_dir/toolchain-mips_gcc-4.5-linaro_uClibc-0.9.32/lib' --without-http-cache
/etc/init.d/nginx restart
nginx: [emerg] the "ssl" parameter requires ngx_http_ssl_module in /etc/nginx/nginx.conf:28
Answer the question
In order to leave comments, you need to log in
The installation of the uhttpd web server and the uhttpd-mod-tls package helped.
SSL was configured in 5 seconds.
I only had to tinker with php so that it worked as a CGI, and not FCGI like in Nginx, but in general, it's OK.
To re-build nginx with SSL (or any other package) for a specific release, you will need the OpenWrt-SDK-* rather than OpenWrt-ImageBuilder-*
Well, even a monkey can rebuild OpenWRT with the necessary packages, everything is stupid there.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question