CentOS7 升级nginx1.12 到 nginx1.17

傷城~ 2021-11-17 09:44 369阅读 0赞

**升级过程**  
阿里云一直在报错提示有一个nginx漏洞。`Nginx HTTP/2和mp4模块远程拒绝服务漏洞`

创建文件 `/etc/yum.repo.d/nginx.repo`

[nginx]
    name=nginx repo
    baseurl=http://nginx.org/packages/mainline/centos/7/$basearch/
    gpgcheck=0
    enabled=1

如果是RHEL则如下内容

[nginx]
    name=nginx repo
    baseurl=http://nginx.org/packages/mainline/rhel/7/$basearch/
    gpgcheck=0
    enabled=1

再执行 `yum update nginx` 即可，升级之后，再重新启动nginx。

**报错**

nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/vhost/site1.conf:14
    nginx: [warn] the "ssl" directive is deprecated, use the "listen ... ssl" directive instead in /etc/nginx/vhost/pma.conf:26

移除 `ssl on` 在 `listen 443 http2 ssl` 加入即可。nginx 1.17 比 nginx1.12配置更清晰。

**状态**

[root@f2 vhost]# systemctl status nginx
    ● nginx.service - nginx - high performance web server
       Loaded: loaded (/usr/lib/systemd/system/nginx.service; enabled; vendor preset: disabled)
       Active: active (running) since Tue 2019-05-21 11:14:47 CST; 2 months 9 days ago
         Docs: http://nginx.org/en/docs/
     Main PID: 9408 (nginx)
       CGroup: /system.slice/nginx.service
               ├─ 9408 nginx: master process /usr/sbin/nginx
               ├─ 9410 nginx: worker process is shutting down
               ├─30376 nginx: worker process
               └─30377 nginx: worker process
    
    May 21 11:14:47 fl2 systemd[1]: Starting The nginx HTTP and reverse proxy server...
    May 21 11:14:47 fl2 nginx[15219]: nginx: the configuration file /etc/nginx/nginx.conf syntax is ok
    May 21 11:14:47 fl2 nginx[15219]: nginx: configuration file /etc/nginx/nginx.conf test is successful
    May 21 11:14:47 fl2 systemd[1]: Started The nginx HTTP and reverse proxy server.

参考：[https://www.prado.lt/5-minute-upgrade-nginx-1-12-to-1-17-on-centos-7-rhel-7][https_www.prado.lt_5-minute-upgrade-nginx-1-12-to-1-17-on-centos-7-rhel-7]

[https_www.prado.lt_5-minute-upgrade-nginx-1-12-to-1-17-on-centos-7-rhel-7]: https://www.prado.lt/5-minute-upgrade-nginx-1-12-to-1-17-on-centos-7-rhel-7