httpd.conf with mod_ssl and MM

This is a multi-part message in MIME format.

------=_NextPart_000_0001_01C26F17.42EBB630
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi,

Having just heard about MM, I am trying to use it.

I compile my apache, but when I try to start it, I get :


Syntax error on line 59 of /opt/apache/conf/local_conf/mod_ssl.conf:
SSLSessionCache: shared memory cache not useable on this platform


and line 59 there is :=20
SSLSessionCache shmcb:/usr/local/apache/logs/ssl_scache(512000)

How can I take advantage of shmcb and shmct as SSLSessionCache methods.

Thanks.

Gilles=20






------=_NextPart_000_0001_01C26F17.42EBB630
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



charset=3Diso-8859-1">

RE: httpd.conf with mod_ssl and MM

This is a multi-part message in MIME format.

------_=_NextPart_001_01C26F63.E087968D
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Hi Gilles,
=20
1) Put all the necessary sources to a dir below e.g. SOURCES. Make sure =
you use the latest ones available as recently some mayor security fixes =
had been done.
=20
All the following works fine on solaris 8 with a gcc
=20
-> SOURCES/apache-1.3.27
-> SOURCES/mm-1.2.1
-> SOURCES/mod_ssl-2.8.11-1.3.27
-> SOURCES/openssl-0.9.6.g
=20
=20
2) Assume the following set up for some variables=20
=20
COMPILER=3D"gcc" # Specify the compiler =
to use
TARGET_DIR=3D"opt" # This is where the =
*compiled* sources will be installed
SOURCES_SUBDIR=3D"SOURCES" # To this subdir the zipped sources =
will be unzipped and untared
APACHE_DIR=3D"apache-1.3.27" # Now we're defining the =
names of the subdirectories for the program sources
MM_DIR=3D"mm-1.2.1" # Most arcives will be =
extracted to a subdirname related to the arcive
OPENSSL_DIR=3D"openssl-0.9.6g" # filename but e.g. =
"c-client.tar.Z will be extracted to "imap-2001a"
MODSSL_DIR=3D"mod_ssl-2.8.11-1.3.27" # will be detected automatically =
below based on the info you state here.

=20
2) Compile MM
=20
mm has to be configured someting like this (on solaris using gcc):
=20
../configure --prefix=3D/${TARGET_DIR}/${MM} \
--with-gcc \
--disable-shared=20
=20
maybe you'll also specify (but not nec needed)

--enable-batch \
--with-shm=3DIPCSHM
=20
=20
After this, you may need to do=20

LD_LIBRARY_PATH=3D/${TARGET_DIR}/${MM}/lib:/${TARGET_DIR}/${ MM}/bin:$LD_L=
IBRARY_PATH
export LD_LIBRARY_PATH

=20
=20
2) Comile openssl
In the openssl-dir do=20
=20
../config --prefix=3D/${TARGET_DIR}/${OPENSSL} -fPIC shared
=20
After making openssl do
=20
export SSL_BASE=3D/${TARGET_DIR}/${OPENSSL}
LD_LIBRARY_PATH=3D/${TARGET_DIR}/${OPENSSL}/lib:/${TARGET_DI R}/${OPENSSL}=
/bin::$LD_LIBRARY_PATH
export LD_LIBRARY_PATH

=20
3) Apply mod_ssl to apache source tree

Changing to SUBDIR where you keep your sources for mod_ssl

Do=20
=20
CC=3D${COMPILER} \
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include" \
CFLAGS=3D"`../${MM}/mm-config --cflags`" \
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`" \
LIBS=3D"-lm `../${MM}/mm-config --libs`" \
EAPI_MM=3D"../${MM}"
../configure --prefix=3D/${TARGET_DIR}/${APACHE} \
--enable-rule=3DEAPI \
--with-apache=3D../${APACHE} \
--with-ssl=3D../${OPENSSL} \
--with-mm=3D../${MM} \
--disable-rule=3DSSL_COMPAT \
--enable-module=3Dssl=20
=20
=20
4) For the configuration of Apache you'll need to specify:
=20
If you do not need to specifiy anything else, change to apaches source =
dir and type 'make', in any other case do change to apaches source dir =
and do=20
=20
CC=3D"${COMPILER}" \
EAPI_MM=3D"../${MM}" \
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include" \
CFLAGS=3D"`../${MM}/mm-config --cflags`" \
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`" \
LIBS=3D"`../${MM}/mm-config --libs`" \
INCLUDE=3D"-I/${TARGET_DIR}/${OPENSSL}/include =
-I/${TARGET_DIR}/${MM}/include" \
../configure --prefix=3D/${TARGET_DIR}/${APACHE} \
--enable-rule=3DEAPI \
--enable-module=3Dssl \
--add more options if needed
=20
=20
This should make shared mem available for apache/mod_ssl.=20
=20
BTW: Which platform are you using?
=20
Hope this helps - good luck
=20
=20
Kind regards,
Bert Courtin
=20


-----Original Message-----
From: Gilles Gros [mailto:gillesg@whitepj.com]
Sent: Wednesday, October 09, 2002 7:09 AM
To: modssl-users@modssl.org
Subject: httpd.conf with mod_ssl and MM


Hi,
=20
Having just heard about MM, I am trying to use it.
=20
I compile my apache, but when I try to start it, I get :
=20
=20
Syntax error on line 59 of /opt/apache/conf/local_conf/mod_ssl.conf:
SSLSessionCache: shared memory cache not useable on this platform
=20
=20
and line 59 there is :=20
SSLSessionCache shmcb:/usr/local/apache/logs/ssl_scache(512000)
=20
How can I take advantage of shmcb and shmct as SSLSessionCache methods.
=20
Thanks.
=20
Gilles=20



=20
=20


------_=_NextPart_001_01C26F63.E087968D
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



charset=3Diso-8859-1">

RE: httpd.conf with mod_ssl and MM

This is a multi-part message in MIME format.

------=_NextPart_000_0012_01C26F2A.9EF919F0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

I am using Linux

Thanks for your help. It set me on the right tracks.
It is working now.
I used a different build method, because I already have a makefile

Can you give me some pointer on the difference between
SSLCacheSession dbm and shm and shmct and shmcb.

Thanks

Gilles


-----Original Message-----
From: Courtin Bert [mailto:b.courtin@t-online.net]
Sent: Wednesday, October 09, 2002 12:17 AM
To: modssl-users@modssl.org
Cc: gillesg@whitepj.com
Subject: RE: httpd.conf with mod_ssl and MM


Hi Gilles,

1) Put all the necessary sources to a dir below e.g. SOURCES. Make =
sure you use the latest ones available as recently some mayor security =
fixes had been done.

All the following works fine on solaris 8 with a gcc

-> SOURCES/apache-1.3.27
-> SOURCES/mm-1.2.1
-> SOURCES/mod_ssl-2.8.11-1.3.27
-> SOURCES/openssl-0.9.6.g


2) Assume the following set up for some variables=20

COMPILER=3D"gcc" # Specify the =
compiler to use
TARGET_DIR=3D"opt" # This is where the =
*compiled* sources will be installed
SOURCES_SUBDIR=3D"SOURCES" # To this subdir the zipped =
sources will be unzipped and untared
APACHE_DIR=3D"apache-1.3.27" # Now we're defining the =
names of the subdirectories for the program sources
MM_DIR=3D"mm-1.2.1" # Most arcives will =
be extracted to a subdirname related to the arcive
OPENSSL_DIR=3D"openssl-0.9.6g" # filename but e.g. =
"c-client.tar.Z will be extracted to "imap-2001a"
MODSSL_DIR=3D"mod_ssl-2.8.11-1.3.27" # will be detected =
automatically below based on the info you state here.


2) Compile MM

mm has to be configured someting like this (on solaris using gcc):

./configure --prefix=3D/${TARGET_DIR}/${MM} \
--with-gcc \
--disable-shared=20

maybe you'll also specify (but not nec needed)

--enable-batch \
--with-shm=3DIPCSHM


After this, you may need to do=20

=
LD_LIBRARY_PATH=3D/${TARGET_DIR}/${MM}/lib:/${TARGET_DIR}/${ MM}/bin:$LD_L=
IBRARY_PATH
export LD_LIBRARY_PATH



2) Comile openssl
In the openssl-dir do=20

./config --prefix=3D/${TARGET_DIR}/${OPENSSL} -fPIC shared

After making openssl do

export SSL_BASE=3D/${TARGET_DIR}/${OPENSSL}
=
LD_LIBRARY_PATH=3D/${TARGET_DIR}/${OPENSSL}/lib:/${TARGET_DI R}/${OPENSSL}=
/bin::$LD_LIBRARY_PATH
export LD_LIBRARY_PATH


3) Apply mod_ssl to apache source tree

Changing to SUBDIR where you keep your sources for mod_ssl

Do=20

CC=3D${COMPILER} \
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include" \
CFLAGS=3D"`../${MM}/mm-config --cflags`" \
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`" \
LIBS=3D"-lm `../${MM}/mm-config --libs`" \
EAPI_MM=3D"../${MM}"
./configure --prefix=3D/${TARGET_DIR}/${APACHE} \
--enable-rule=3DEAPI \
--with-apache=3D../${APACHE} \
--with-ssl=3D../${OPENSSL} \
--with-mm=3D../${MM} \
--disable-rule=3DSSL_COMPAT \
--enable-module=3Dssl=20


4) For the configuration of Apache you'll need to specify:

If you do not need to specifiy anything else, change to apaches source =
dir and type 'make', in any other case do change to apaches source dir =
and do=20

CC=3D"${COMPILER}" \
EAPI_MM=3D"../${MM}" \
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include" \
CFLAGS=3D"`../${MM}/mm-config --cflags`" \
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`" \
LIBS=3D"`../${MM}/mm-config --libs`" \
INCLUDE=3D"-I/${TARGET_DIR}/${OPENSSL}/include =
-I/${TARGET_DIR}/${MM}/include" \
./configure --prefix=3D/${TARGET_DIR}/${APACHE} \
--enable-rule=3DEAPI \
--enable-module=3Dssl \
--add more options if needed


This should make shared mem available for apache/mod_ssl.=20

BTW: Which platform are you using?

Hope this helps - good luck


Kind regards,
Bert Courtin



-----Original Message-----
From: Gilles Gros [mailto:gillesg@whitepj.com]
Sent: Wednesday, October 09, 2002 7:09 AM
To: modssl-users@modssl.org
Subject: httpd.conf with mod_ssl and MM


Hi,

Having just heard about MM, I am trying to use it.

I compile my apache, but when I try to start it, I get :


Syntax error on line 59 of /opt/apache/conf/local_conf/mod_ssl.conf:
SSLSessionCache: shared memory cache not useable on this platform


and line 59 there is :=20
SSLSessionCache =
shmcb:/usr/local/apache/logs/ssl_scache(512000)

How can I take advantage of shmcb and shmct as SSLSessionCache =
methods.

Thanks.

Gilles=20



=20


------=_NextPart_000_0012_01C26F2A.9EF919F0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable



charset=3Diso-8859-1">

style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">

face=3DTahoma=20
size=3D2>-----Original Message-----
From: Courtin Bert=20
[mailto:b.courtin@t-online.net]
Sent: Wednesday, October 09, =
2002=20
12:17 AM
To: modssl-users@modssl.org
Cc:=20
gillesg@whitepj.com
Subject: RE: httpd.conf with mod_ssl and =

MM

color=3D#0000ff size=3D2>Hi=20
Gilles,

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>1)=20
Put all the necessary sources to a dir below e.g. SOURCES. Make sure =
you use=20
the latest ones available as recently some mayor security fixes had =
been=20
done.

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>All=20
the following works fine on solaris 8 with a gcc

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2>-> SOURCES/apache-1.3.27

color=3D#0000ff=20
size=3D2>-> SOURCES/mm-1.2.1

color=3D#0000ff size=3D2>

color=3D#0000ff=20
size=3D2>-> SOURCES/mod_ssl-2.8.11-1.3.27

color=3D#0000ff=20
size=3D2>->=20
=
SOURCES/openssl-0.9.6.g

IV>

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>2)=20
Assume the following set up for some variables

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
=
size=3D2>COMPILER=3D"gcc"        =
            &=
nbsp;           &n=
bsp;=20
# Specify the compiler to use

color=3D#0000ff=20
=
size=3D2>TARGET_DIR=3D"opt"       &nbs=
p;            =
;          =20
 # This is where the *compiled* sources will be=20
installed
face=3DArial=20
color=3D#0000ff=20
=
size=3D2>SOURCES_SUBDIR=3D"SOURCES"      &n=
bsp; =20
 # To this subdir the zipped sources will be unzipped and=20
untared

color=3D#0000ff=20
=
size=3D2>APACHE_DIR=3D"apache-1.3.27"      =
       =20
 # Now we're defining the names of the subdirectories for the =
program=20
=
sources
MM_DIR=3D"mm-1.2.1"       &=
nbsp;           &n=
bsp;      =20
   # Most arcives will be extracted to a subdirname related =
to the=20
=
arcive
OPENSSL_DIR=3D"openssl-0.9.6g"     &nb=
sp;     =20
 # filename but e.g. "c-client.tar.Z will be extracted to=20
"imap-2001a"
MODSSL_DIR=3D"mod_ssl-2.8.11-1.3.27"   =
 # will be=20
detected automatically below based on the info you state=20
here.
face=3DArial=20
color=3D#0000ff size=3D2>

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>2)=20
Compile MM

color=3D#0000ff=20
size=3D2> face=3DArial=20
color=3D#0000ff size=3D2> 

color=3D#0000ff size=3D2>mm=20
has to be configured someting like this (on solaris using=20
gcc):

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2>./configure --prefix=3D/${TARGET_DIR}/${MM}=20
\
        --with-gcc=20
\
        --disable-shared=20

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2>maybe you'll also specify (but not nec needed)

face=3DArial=20
color=3D#0000ff size=3D2> size=3D2> face=3DArial color=3D#0000ff size=3D2> color=3D#0000ff=20
size=3D2> size=3D2> color=3D#0000ff size=3D2> size=3D2> face=3DArial color=3D#0000ff size=3D2> color=3D#0000ff=20
size=3D2>
size=3D2>        --enable-batch=20
\
        =
--with-shm=3DIPCSHM

 

 

color=3D#0000ff=20
size=3D2>After this, you may need to =
do=20

=
size=3D2>LD_LIBRARY_PATH=3D/${TARGET_DIR}/${MM}/lib:/${TARGE T_DIR}/${MM}/=
bin:$LD_LIBRARY_PATH
export=20
LD_LIBRARY_PATH

 

 

2) Comile openssl

In the openssl-dir do =

 

./config=20
--prefix=3D/${TARGET_DIR}/${OPENSSL} -fPIC shared

 

After making openssl =
do

 

export=20
SSL_BASE=3D/${TARGET_DIR}/${OPENSSL}
=
class=3D837284806-09102002>LD_LIBRARY_PATH=3D/${TARGET_DIR}/ ${OPENSSL}/li=
b:/${TARGET_DIR}/${OPENSSL}/bin::$LD_LIBRARY_PATH
export=20
LD_LIBRARY_PATH

class=3D837284806-09102002> 

class=3D837284806-09102002>3)  Apply mod_ssl to apache source=20
tree

class=3D837284806-09102002>Changing to SUBDIR where you keep your =
sources for=20
mod_ssl

class=3D837284806-09102002>

face=3DArial=20
color=3D#0000ff size=3D2> size=3D2> face=3DArial color=3D#0000ff size=3D2> color=3D#0000ff=20
size=3D2> size=3D2> color=3D#0000ff size=3D2> size=3D2> face=3DArial color=3D#0000ff size=3D2>
color=3D#0000ff=20
size=3D2>Do

class=3D837284806-09102002> 

CC=3D${COMPILER}
class=3D837284806-09102002>=20
\
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include"=20
\
CFLAGS=3D"`../${MM}/mm-config --cflags`"=20
\
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`"=20
\
LIBS=3D"-lm `../${MM}/mm-config --libs`"=20
\
EAPI_MM=3D"../${MM}"
./configure =
--prefix=3D/${TARGET_DIR}/${APACHE} class=3D837284806-09102002>=20
=
\
          &=
nbsp;=20
--enable-rule=3DEAPI=20
=
\
           =20
--with-apache=3D../${APACHE}=20
=
\
           =20
--with-ssl=3D../${OPENSSL}=20
=
\
           =20
--with-mm=3D../${MM}=20
=
\
           =20
--disable-rule=3DSSL_COMPAT=20
=
\
           =20
--enable-module=3Dssl

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>4)=20
For the configuration of Apache you'll need to =
specify:

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>If=20
you do not need to specifiy anything else, change to apaches source =
dir and=20
type 'make', in any other case do change to apaches source dir and do=20

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2>CC=3D"${COMPILER}" \
EAPI_MM=3D"../${MM}"=20
\
CPFLAGS=3D"-I/${TARGET_DIR}/${OPENSSL}/include"=20
\
CFLAGS=3D"`../${MM}/mm-config --cflags`"=20
\
LDFLAGS=3D"-L/${TARGET_DIR}/${OPENSSL}/lib `../${MM}/mm-config =
--ldflags`"=20
\
LIBS=3D"`../${MM}/mm-config --libs`"=20
\
INCLUDE=3D"-I/${TARGET_DIR}/${OPENSSL}/include=20
-I/${TARGET_DIR}/${MM}/include" \
./configure=20
--prefix=3D/${TARGET_DIR}/${APACHE}=20
=
\
           =20
--enable-rule=3DEAPI=20
=
\
           =20
--enable-module=3Dssl=20
=
\
            =
--add=20
more options if needed

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>This=20
should make shared mem available for apache/mod_ssl. =

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>BTW:=20
Which platform are you using?

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>Hope=20
this helps - good luck

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff=20
size=3D2> 

color=3D#0000ff size=3D2>Kind=20
regards,

color=3D#0000ff size=3D2>Bert=20
Courtin

color=3D#0000ff=20
size=3D2> 

style=3D"PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px =
solid; MARGIN-RIGHT: 0px">

face=3DTahoma=20
size=3D2>-----Original Message-----
From: Gilles Gros=20
[mailto:gillesg@whitepj.com]
Sent: Wednesday, October 09, =
2002=20
7:09 AM
To: modssl-users@modssl.org
Subject: =
httpd.conf=20
with mod_ssl and MM

class=3D531110605-09102002>Hi,

class=3D531110605-09102002> 

class=3D531110605-09102002>Having=20
just heard about MM, I am trying to use =
it.

class=3D531110605-09102002> 

class=3D531110605-09102002>I compile=20
my apache, but when I try to start it, I get =
:

class=3D531110605-09102002> 

class=3D531110605-09102002> 

class=3D531110605-09102002>Syntax error on line 59 of=20
/opt/apache/conf/local_conf/mod_ssl.conf:
SSLSessionCache: shared =
memory=20
cache not useable on this platform

 

 

size=3D2>a class=3D531110605-09102002>nd line 59 there is : =

=
class=3D531110605-09102002>SSLSessionCache     &=
nbsp;  =20
shmcb:/usr/local/apache/logs/ssl_scache(512000)

class=3D531110605-09102002> 

class=3D531110605-09102002>How can I take=20
advantage of shmcb and shmct as=20
SSLSessionCache methods.

class=3D531110605-09102002> 

class=3D531110605-09102002>Thanks.

class=3D531110605-09102002> 

class=3D531110605-09102002>Gilles

class=3D531110605-09102002>
 

size=3D2>