feedback about nginx-ct HOT 3 CLOSED

What version of OpenSSL are you trying to build against? 1.0.2 or above is required, as older versions don't have the SSL_CTX_add_server_custom_ext function.

The instructions at http://www.certificate-transparency.org/resources-for-site-owners/nginx demonstrate how to build a newer version of OpenSSL alongside nginx.

from nginx-ct.

libressl 2.2.1

from nginx-ct.

Unfortunately LibreSSL doesn't appear to have the SSL_CTX_add_server_custom_ext function, presumably because it was forked from OpenSSL 1.0.1. (The function was introduced in 1.0.2.)

I don't think there's much I can do to workaround this in nginx-ct - it needs the function to add the signed_certificate_timestamp TLS extension. You'll need to use OpenSSL 1.0.2, or hope that the LibreSSL developers add support for custom TLS extensions in a future version.

from nginx-ct.