Nginx 1.4.0, for Wheezy and Squeeze

April 28, 2013 · Guillaume Plessis

Nginx 1.4.0 stable version has been released on April 24th 2013, incorporating many new features developed in the 1.3.x branch :

support for proxying of WebSocket connections,
OCSP stapling,
SPDY module,
gunzip filter,
and more… See the full Changelog for more details.

As a consequence, Dotdeb’s packages of Nginx 1.4.0 are now available for both Debian 7.0 “Wheezy” and Debian 6.0 “Squeeze” (amd64/i386) with the following changes :

(Wheezy only) SPDY support has been enabled in nginx-extras and nginx-full.
(Wheezy only) the nginx-passenger flavor has been removed. You should use unicorn or uwsgi-plugin-rack-ruby* instead.
nginx-extras now supports HTTP Gunzip.
Naxsi has been upgraded to 0.50.
chunkin-nginx-module (useless now) and nginx-upload-module (incompatible with 3.1.8+) are no longer supported.
The headers-more, echo, lua, Push stream, Pinba and Passenger modules got minor upgrades.

As usual, if you want to know which module has been included in each Nginx flavor, you just have to look at this document.

Dyneslott April 28, 2013
Anyone having issues with this update? My nginx starts but refuses connections after the upgrade, no log entry to indicate anything wrong.
Jonathan Leroy April 28, 2013
@Dyneslott: If you use IPv6 address in “listen” directive, you need to add “ipv6only=off” to also listen IPv4 addresses. Eg: listen [::]:80; will become listen [::]:80 pv6only=off;
- Dyneslott April 28, 2013
  Jonathan: thanks, I just figured out the same while testing :D
Jonathan Leroy April 29, 2013
When I restart Nginx, I get the following warning message :
[warn] nginx was built without OpenSSL NPN support, SPDY is not enabled for [::]:443 in …
In fact, SPDY is unusable with most Nginx configurations :/
- Guillaume Plessis April 29, 2013
  @Jonathan Leroy : Oh sorry to hear that, I missed that point. I’ll see what I can do, but I think we’ll have to wait for the upcoming Wheezy packages (if the OpenSSL library has been built with NPN support, I have to check this).
lukasamd April 29, 2013
I hace problem with SPDY in nginx. I installed nginx-full and add “ssl spdy” to server listen directive. When I test / restart nginx I receive info:
[….] Restarting nginx: nginxnginx: [warn] nginx was built without OpenSSL NPN support, SPDY is not enabled for 0.0.0.0:443 in /etc/nginx/sites-enabled/mysite
I have OpenSSL 1.0.1e, so with NPN. What’s wrong?
- Guillaume Plessis April 29, 2013
  @lukasamd : you have OpenSSL 1.0.1e, but you use Squeeze packages. They were built against OpenSSL libraries without NPN support, so I guess SPDY was disabled during the build process. I think we’ll have to wait for the upcoming Wheezy packages (working on it).
lukasamd April 29, 2013
@Guillaume Plessis I forgot write about that. I use Wheezy on OpenVZ VPS.
Guillaume Plessis April 29, 2013
SPDY support has been removed from Squeeze. If you really want it, you should upgrade to Wheezy.
maltris April 29, 2013
This ipv6only=off -option seems like a new thing needed since the last stable versions. I added this to the default config and now every other virtual host works very well. No need to add it to every {server}-Container, just to the first. So its good to create a default config named 000-default so it is the first config that is used.
budingyun April 29, 2013
Working fine on Debian Squeeze. :D
lukasamd April 29, 2013
@Guillaume Plessis But I have Wheezy. Default, VPS had Squeezy, but I did upgrade to Wheezy about month ago.
I will check this on virtualbox with debian testing rc, but it’s strange.
Tomas Varil April 29, 2013
Hello Guillaume, since we have Nginx for wheezy on dotdeb do you have any details or plans about PHP and other packages to get them work with wheezy? Thanx Tom
- Guillaume Plessis April 29, 2013
  @Thomas Varil : I think I’ll write a blog post about it, but here is the plan : https://github.com/gplessis/dotdeb-php5/issues/31#issuecomment-16878235
Edison May 1, 2013
After upgrade, still shows: nginx -v nginx version: nginx/1.2.7
- Steven De Groote May 1, 2013
  I had the same before. You should also perform: apt-get install nginx-common
Robert May 1, 2013
Hi,
It’s not a big issue. But I noticed that the upgrade has overwritten the index.html file in /usr/share/nginx/html. I already restored the file from a backup. :)
sunfire May 2, 2013
Hi, will SPDY Support included again in next Squeeze Versions?
- Guillaume Plessis May 2, 2013
  @sunfire : no, because of an outdated OpenSSL library. You’ll have to upgrade to Wheezy if you want the SPDY support.
Moji May 2, 2013
What happens to upload module, isn’t it going to be supported again?
- Guillaume Plessis May 2, 2013
  @Moji : I’ll watch the module commits and if it’s made compatible with 1.4, I’ll include it back.
  - kaveh minooie July 9, 2013
    is there a way that I can use older version (1.2.8) until this upload module situation gets resolved ? cause I can’t find the files in your repository.
    Thanks,
    - Guillaume Plessis July 9, 2013
      @kaveh minooie : http://archives.dotdeb.org/
Pawel May 3, 2013
Why on Squeeze, after I install nginx I always get:
insserv: warning: script is corrupt or invalid: /etc/init.d/../rc2.d/S99local insserv: warning: script ‘firewall’ missing LSB tags and overrides
?
- Guillaume Plessis May 3, 2013
  @Pawel : because of missing LSB headers in your /etc/init.d/firewall script
Simon Gebert May 4, 2013
As I mentioned before, with the release of version 1.2.7, I can’t run any version later than 1.2.6 without breaking ssl. I am running squeeze with openssl 1.0.1e Please give me a hint of what changed between version 1.2.6 and 1.2.7, that breaks the system since.
P4ge May 5, 2013
Hey,
first I want to thank you for all your effort and hard work you put into this project :-)
In your nginx-extras flavor it seem you included ngx_pagespeed, or what does (WIP) mean? I tried to use ist (pagespeed on) but it doesn’t seem to work.
Hope you can help, thanks.
- Guillaume Plessis May 5, 2013
  @P4ge : WIP = work in progress = no ngx_pagespeed yet, still too buggy and tricky to build. I’ll announce it once it’s available.
Jools May 6, 2013
Why was nginx-passenger flavour removed? Was it for some technical reason? Although you list alternatives, that means a bunch of reconfiguration, and everything was working just fine with passenger. Thanks.
- Anthony Somerset May 7, 2013
  i added a feature request over here: https://github.com/gplessis/dotdeb-nginx/issues/37
Jools May 7, 2013
I re-added support for the passenger package and built from source. I changed dependency version to use passenger from wheezy. All works. As it’s not a major issue (or one I don’t know of), ro have an extra package, I would like to request it is put back in.
- Richard Gomes November 13, 2013
  Hi,
  I’m absolutely ignorant on all involving ruby/gem/rails.
  Could you please point out how you re-added support for passenger?
  Thanks a lot :)
Anthony Somerset May 7, 2013
why was passenger support removed - this effectively breaks the upgrade path for a couple of servers for me as we have been using the dotdeb nginx-passenger packages for some time, and its not going to be a trivial matter to fix the rails apps to work with unicorn et al very quickly due to being older codebases
Scott Stewart May 14, 2013
Anyone have issues once they’ve enabled spdy?
I get no errors but connection refused in a web browser.
Adrien July 17, 2013
Hi and thank you for you work.
Is there, by any chance, a way of having SPDY & naxsi at the same time ?
- Guillaume Plessis July 17, 2013
  @Adrien : in the next release (1.4.2, released today), yes.
  - Adrien July 17, 2013
    Thank you Guillaume, you’re a star ! Any E.T.A for your packages ?
    - Guillaume Plessis July 17, 2013
      @Adrien : when I find some spare time. I’m currently moving from Paris, I’m pretty busy and I don’t have a permanent Internet connection. Next week-end, maybe.
alexandr September 19, 2013
nginx-http-push ?
j0rd November 17, 2013
Could compiling the latest version of OpenSSL into nginx as a static lib allow us to get SPDY support in Squeeze?
Here’s an example: http://forum.nginx.org/read.php?2,241381,241386#msg-241386
- Guillaume Plessis November 17, 2013
  @jord : it could work, but upgrading to Wheezy could be safer