Problems compiling mod_ssl with apache 2.0.44

Hi!
(Sending this again after finally succesfully subscribing, so sorry if
you get it twice)

I'm trying to compile Apache 2.0.44 with mod_ssl and have some problems.

I've downloaded and installed openssl-0.9.7. Using:
../config --prefix=/service/apache2/openssl/
--openssldir=/service/apache2/openssl/
I could use those files to compile cadaver.

But when I try to compile apache:
../configure --prefix=/service/apache2
--exec-prefix=/service/apache2/arch/linux-intel --enable-dav
--enable-ssl --with-ssl=/service/apache2/openssl/
....a lot of rows...
make
....a lot of rows...
/bin/sh /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol
--silent --mode=link gcc -g -O2 -pthread -DLINUX=2 -D_REENTRANT
-D_XOPEN_SOURCE=500 -D_BSD_SOURCE -D_SVID_SOURCE
-DAP_HAVE_DESIGNATED_INITIALIZER
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
-I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix
-I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/http
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy
-I/usr/local/service/apache2/src/httpd-2.0.44/include
-I/service/apache2/openssl//include/openssl
-I/service/apache2/openssl//include
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in
-export-dynamic
-L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
-L/service/apache2/openssl//lib -o httpd modules.lo
modules/aaa/mod_access.la modules/aaa/mod_auth.la
modules/filters/mod_include.la modules/loggers/mod_log_config.la
modules/metadata/mod_env.la modules/metadata/mod_setenvif.la
modules/ssl/mod_ssl.la modules/http/mod_http.la modules/http/mod_mime.la
modules/dav/main/mod_dav.la modules/generators/mod_status.la
modules/generators/mod_autoindex.la modules/generators/mod_asis.la
modules/generators/mod_cgi.la modules/dav/fs/mod_dav_fs.la
modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la
modules/mappers/mod_imap.la modules/mappers/mod_actions.la
modules/mappers/mod_userdir.la modules/mappers/mod_alias.la
modules/mappers/mod_so.la server/mpm/prefork/libprefork.la
server/libmain.la os/unix/libos.la -lssl -lcrypto
/usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.la
-lgdbm -ldb
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib/libexpat.la

/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la -lm
-lcrypt -lnsl -lresolv -ldl
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_INFO_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_push'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_SSL_CIPHER_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_SSL_CIPHER_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_pop_free'
modules/ssl/.libs/mod_ssl.so: undefined reference to
`sk_X509_NAME_ENTRY_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_SSL_CIPHER_dup'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_REVOKED_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_INFO_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to
`sk_X509_NAME_ENTRY_value'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_SSL_CIPHER_free'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_INFO_pop_free'
modules/ssl/.libs/mod_ssl.so: undefined reference to
`sk_X509_NAME_set_cmp_func'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_push'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_free'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_INFO_new_null'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_new'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_NAME_find'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_REVOKED_num'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_SSL_CIPHER_find'
modules/ssl/.libs/mod_ssl.so: undefined reference to `sk_X509_INFO_free'
modules/ssl/.libs/mod_ssl.so: undefined reference to `OPENSSL_free'
collect2: ld returned 1 exit status
make[1]: *** [httpd] Error 1
make[1]: Leaving directory `/usr/local/service/apache2/src/httpd-2.0.44'
make: *** [all-recursive] Error 1

Am I missing a lib or something that should have the sk_-stuff?
Some help would be appreciated?

Regards Erik Melkersson

--
__________________________
Erik Melkersson, Technical Webmaster
UNIT, Linköpings Universitet
melker@unit.liu.se, 013-285794
http://www.unit.liu.se/


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

Hello,

My first guess would be that you have another version of openssl
libraries and/or headers installed on your system. The kind of linker
error you report usually suggests the code was compiled against one
openssl version's headers, but is trying to link against a different
openssl version's libraries. If my hunch is right, you have an older
version of openssl installed on the system and your code is using the
older version's headers but trying to link against your 0.9.7
installation in /service/apache2/openssl.

I can't test any of this right now so I'm flying a little blind, but
here's a couple of ideas;

(1) If you can (even temporarily) move the system's existing openssl
headers (and libs, for safety) out of the way and try again, you would
see if apache finds the correct headers and libs for sure.

(2) Try forcing the include path in a different way, eg; configure
apache2 like;
# export CFLAGS="-I/service/apache2/openssl/include"
# ./configure --prefix=/service/apache2/

Good luck,
Geoff

PS: If that leads nowhere, you may want to post your query to one of the
apache2 mailing lists - a version of mod_ssl is now included there and
this sort of configuration issue is quite different between adding
mod_ssl to apache 1.3 and using apache2's builtin version.

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

Hi!

Thanks for the reply.

Geoff Thorpe wrote:
> ... The kind of linker
> error you report usually suggests the code was compiled against one
> openssl version's headers, but is trying to link against a different
> openssl version's libraries....

Yes, I tried to compile it against different openssl-version and didn't
make clean in betweend (dumb fault by me)

After cleaning and compiling again we get some other errors.
undefined reference to OPENSSL_free, RAND_egd and RAND_status (se below
for complete data)

In order to make apache compile we
- changed OPENSSL_free to CRYPTO_free in a #define in the modules/ssl/
headers file. (As that is done in openssl anyway)
- commented out the 3+3 lines where RAND_egd and RAND_status are used in
modules/ssl/ssl_engine_rand.c

Now we can compile and use it over ssl even though commenting out non
working code is propably a bad thing to do.


../configure --prefix=/service/apache2
--exec-prefix=/service/apache2/arch/linux-intel --enable-ssl
--with-openssl=/service/apache2/openssl/
....lots of rows...
make
....lots of rows...
/bin/sh /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol
--mode=link gcc -g -O2 -pthread -DLINUX=2 -D_REENTRANT
-D_XOPEN_SOURCE=500 -D_BSD_SOURCE -D_SVID_SOURCE
-DAP_HAVE_DESIGNATED_INITIALIZER
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include
-I/service/apache2/openssl/include
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
-I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix
-I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/http
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy
-I/usr/local/service/apache2/src/httpd-2.0.44/include
-I/usr/local/ssl/include/openssl -I/usr/local/ssl/include
-I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in
-export-dynamic
-L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
-L/usr/local/ssl/lib -o httpd modules.lo modules/aaa/mod_access.la
modules/aaa/mod_auth.la modules/filters/mod_include.la
modules/loggers/mod_log_config.la modules/metadata/mod_env.la
modules/metadata/mod_setenvif.la modules/ssl/mod_ssl.la
modules/http/mod_http.la modules/http/mod_mime.la
modules/generators/mod_status.la modules/generators/mod_autoindex.la
modules/generators/mod_asis.la modules/generators/mod_cgi.la
modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la
modules/mappers/mod_imap.la modules/mappers/mod_actions.la
modules/mappers/mod_userdir.la modules/mappers/mod_alias.la
modules/mappers/mod_so.la server/mpm/prefork/libprefork.la
server/libmain.la os/unix/libos.la -lssl -lcrypto
/usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.la
-lgdbm -ldb
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib/libexpat.la
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la -lm
-lcrypt -lnsl -lresolv -ldl
modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
`ssl_hook_UserCheck':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:875:
undefined reference to `OPENSSL_free'
modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
`ssl_callback_SSLVerify':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1206:
undefined reference to `OPENSSL_free'
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1210:
undefined reference to `OPENSSL_free'
modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
`ssl_callback_SSLVerify_CRL':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1469:
undefined reference to `OPENSSL_free'
modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
`modssl_proxy_info_log':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1507:
undefined reference to `OPENSSL_free'
modules/ssl/.libs/mod_ssl.al(ssl_engine_rand.lo): In function
`ssl_rand_seed':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:125:
undefined reference to `RAND_egd'
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:163:
undefined reference to `RAND_status'
modules/ssl/.libs/mod_ssl.al(ssl_engine_vars.lo): In function
`ssl_var_lookup_ssl_cert':
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_vars.c:351:
undefined reference to `OPENSSL_free'

Machine running Linux 2.2.17-14smp (RedHat 6.2)
openssl 0.9.7
apache 2.0.44

--
__________________________
Erik Melkersson, Technical Webmaster
UNIT, Linköpings Universitet
melker@unit.liu.se, 013-285794
http://www.unit.liu.se/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

I have just succesfully compiled apache 2.0.44 with mod_ssl and openssl
0.9.7 on RH8. First I have compiled openssl then apache and everything
works fine. On trick after make install in openssl it doesn't copy
headers so you have to manually copy them to your install directory.

On 2/7/2003 10:25 AM, Erik Melkersson a écrit:
> Hi!
>
> Thanks for the reply.
>
> Geoff Thorpe wrote:
>> ... The kind of linker
>> error you report usually suggests the code was compiled against one
>> openssl version's headers, but is trying to link against a different
>> openssl version's libraries....
>
> Yes, I tried to compile it against different openssl-version and didn't
> make clean in betweend (dumb fault by me)
>
> After cleaning and compiling again we get some other errors.
> undefined reference to OPENSSL_free, RAND_egd and RAND_status (se below
> for complete data)
>
> In order to make apache compile we
> - changed OPENSSL_free to CRYPTO_free in a #define in the modules/ssl/
> headers file. (As that is done in openssl anyway)
> - commented out the 3+3 lines where RAND_egd and RAND_status are used in
> modules/ssl/ssl_engine_rand.c
>
> Now we can compile and use it over ssl even though commenting out non
> working code is propably a bad thing to do.
>
>
> ./configure --prefix=/service/apache2
> --exec-prefix=/service/apache2/arch/linux-intel --enable-ssl
> --with-openssl=/service/apache2/openssl/
> ...lots of rows...
> make
> ...lots of rows...
> /bin/sh /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol
> --mode=link gcc -g -O2 -pthread -DLINUX=2 -D_REENTRANT
> -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -D_SVID_SOURCE
> -DAP_HAVE_DESIGNATED_INITIALIZER
> -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude
> -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include
> -I/service/apache2/openssl/include
> -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
> -I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix
> -I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/http
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy
> -I/usr/local/service/apache2/src/httpd-2.0.44/include
> -I/usr/local/ssl/include/openssl -I/usr/local/ssl/include
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in
> -export-dynamic
> -L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
> -L/usr/local/ssl/lib -o httpd modules.lo modules/aaa/mod_access.la
> modules/aaa/mod_auth.la modules/filters/mod_include.la
> modules/loggers/mod_log_config.la modules/metadata/mod_env.la
> modules/metadata/mod_setenvif.la modules/ssl/mod_ssl.la
> modules/http/mod_http.la modules/http/mod_mime.la
> modules/generators/mod_status.la modules/generators/mod_autoindex.la
> modules/generators/mod_asis.la modules/generators/mod_cgi.la
> modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la
> modules/mappers/mod_imap.la modules/mappers/mod_actions.la
> modules/mappers/mod_userdir.la modules/mappers/mod_alias.la
> modules/mappers/mod_so.la server/mpm/prefork/libprefork.la
> server/libmain.la os/unix/libos.la -lssl -lcrypto
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.la
> -lgdbm -ldb
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib/libexpat.la
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la -lm
> -lcrypt -lnsl -lresolv -ldl
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> `ssl_hook_UserCheck':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:875:
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> `ssl_callback_SSLVerify':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1206:
> undefined reference to `OPENSSL_free'
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1210:
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> `ssl_callback_SSLVerify_CRL':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1469:
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> `modssl_proxy_info_log':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1507:
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_rand.lo): In function
> `ssl_rand_seed':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:125:
> undefined reference to `RAND_egd'
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:163:
> undefined reference to `RAND_status'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_vars.lo): In function
> `ssl_var_lookup_ssl_cert':
> /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_vars.c:351:
> undefined reference to `OPENSSL_free'
>
> Machine running Linux 2.2.17-14smp (RedHat 6.2)
> openssl 0.9.7
> apache 2.0.44
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Problems compiling mod_ssl with apache 2.0.44

This is off the modssl track, but has anyone gotten frontpage extensions =
working for httpd-2.0.44? 2.0.40 is the supported version, and the =
install quits if that is not it. Just checking.... =20


-----Original Message-----
From: Sasa STUPAR [mailto:sasa@stupar.homelinux.net]
Sent: Friday, February 07, 2003 2:39 AM
To: modssl-users@modssl.org
Subject: Re: Problems compiling mod_ssl with apache 2.0.44


I have just succesfully compiled apache 2.0.44 with mod_ssl and openssl
0.9.7 on RH8. First I have compiled openssl then apache and everything
works fine. On trick after make install in openssl it doesn't copy
headers so you have to manually copy them to your install directory.

On 2/7/2003 10:25 AM, Erik Melkersson a =E9crit:
> Hi!
>=20
> Thanks for the reply.
>=20
> Geoff Thorpe wrote:
>> ... The kind of linker
>> error you report usually suggests the code was compiled against one
>> openssl version's headers, but is trying to link against a different
>> openssl version's libraries....
>=20
> Yes, I tried to compile it against different openssl-version and =
didn't=20
> make clean in betweend (dumb fault by me)
>=20
> After cleaning and compiling again we get some other errors.
> undefined reference to OPENSSL_free, RAND_egd and RAND_status (se =
below=20
> for complete data)
>=20
> In order to make apache compile we
> - changed OPENSSL_free to CRYPTO_free in a #define in the modules/ssl/ =

> headers file. (As that is done in openssl anyway)
> - commented out the 3+3 lines where RAND_egd and RAND_status are used =
in=20
> modules/ssl/ssl_engine_rand.c
>=20
> Now we can compile and use it over ssl even though commenting out non=20
> working code is propably a bad thing to do.
>=20
>=20
> ./configure --prefix=3D/service/apache2=20
> --exec-prefix=3D/service/apache2/arch/linux-intel --enable-ssl=20
> --with-openssl=3D/service/apache2/openssl/
> ...lots of rows...
> make
> ...lots of rows...
> /bin/sh /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol =

> --mode=3Dlink gcc -g -O2 -pthread -DLINUX=3D2 -D_REENTRANT=20
> -D_XOPEN_SOURCE=3D500 -D_BSD_SOURCE -D_SVID_SOURCE=20
> -DAP_HAVE_DESIGNATED_INITIALIZER=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include=20
> -I/service/apache2/openssl/include=20
> =
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/l=
ib=20
> -I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/http=2 0
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy= 20
> -I/usr/local/service/apache2/src/httpd-2.0.44/include=20
> -I/usr/local/ssl/include/openssl -I/usr/local/ssl/include=20
> -I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in=20
> -export-dynamic=20
> =
-L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/l=
ib=20
> -L/usr/local/ssl/lib -o httpd modules.lo modules/aaa/mod_access.la =

> modules/aaa/mod_auth.la modules/filters/mod_include.la=20
> modules/loggers/mod_log_config.la modules/metadata/mod_env.la=20
> modules/metadata/mod_setenvif.la modules/ssl/mod_ssl.la=20
> modules/http/mod_http.la modules/http/mod_mime.la=20
> modules/generators/mod_status.la modules/generators/mod_autoindex.la=20
> modules/generators/mod_asis.la modules/generators/mod_cgi.la=20
> modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la=20
> modules/mappers/mod_imap.la modules/mappers/mod_actions.la=20
> modules/mappers/mod_userdir.la modules/mappers/mod_alias.la=20
> modules/mappers/mod_so.la server/mpm/prefork/libprefork.la=20
> server/libmain.la os/unix/libos.la -lssl -lcrypto=20
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la=20
> =
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.=
la=20
> -lgdbm -ldb=20
> =
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib=
/libexpat.la=20
> /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la -lm =

> -lcrypt -lnsl -lresolv -ldl
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> `ssl_hook_UserCheck':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:875:=20
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> `ssl_callback_SSLVerify':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1206:=20
> undefined reference to `OPENSSL_free'
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1210:=20
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> `ssl_callback_SSLVerify_CRL':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1469:=20
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> `modssl_proxy_info_log':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1507:=20
> undefined reference to `OPENSSL_free'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_rand.lo): In function=20
> `ssl_rand_seed':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c=
:125:=20
> undefined reference to `RAND_egd'
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c=
:163:=20
> undefined reference to `RAND_status'
> modules/ssl/.libs/mod_ssl.al(ssl_engine_vars.lo): In function=20
> `ssl_var_lookup_ssl_cert':
> =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_vars.c=
:351:=20
> undefined reference to `OPENSSL_free'
>=20
> Machine running Linux 2.2.17-14smp (RedHat 6.2)
> openssl 0.9.7
> apache 2.0.44
>=20


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Problems compiling mod_ssl with apache 2.0.44

are you sure you wish to degrade the security of your apache server with
front[age extensions? Frontpage and coldfusion have a nasty security
history.


Thanks,

Ron DuFresne


On Fri, 7 Feb 2003, Boulytchev, Vasiliy wrote:

> This is off the modssl track, but has anyone gotten frontpage extensions working for httpd-2.0.44? 2.0.40 is the supported version, and the install quits if that is not it. Just checking....
>
>
> -----Original Message-----
> From: Sasa STUPAR [mailto:sasa@stupar.homelinux.net]
> Sent: Friday, February 07, 2003 2:39 AM
> To: modssl-users@modssl.org
> Subject: Re: Problems compiling mod_ssl with apache 2.0.44
>
>
> I have just succesfully compiled apache 2.0.44 with mod_ssl and openssl
> 0.9.7 on RH8. First I have compiled openssl then apache and everything
> works fine. On trick after make install in openssl it doesn't copy
> headers so you have to manually copy them to your install directory.
>
> On 2/7/2003 10:25 AM, Erik Melkersson a écrit:
> > Hi!
> >
> > Thanks for the reply.
> >
> > Geoff Thorpe wrote:
> >> ... The kind of linker
> >> error you report usually suggests the code was compiled against one
> >> openssl version's headers, but is trying to link against a different
> >> openssl version's libraries....
> >
> > Yes, I tried to compile it against different openssl-version and didn't
> > make clean in betweend (dumb fault by me)
> >
> > After cleaning and compiling again we get some other errors.
> > undefined reference to OPENSSL_free, RAND_egd and RAND_status (se below
> > for complete data)
> >
> > In order to make apache compile we
> > - changed OPENSSL_free to CRYPTO_free in a #define in the modules/ssl/
> > headers file. (As that is done in openssl anyway)
> > - commented out the 3+3 lines where RAND_egd and RAND_status are used in
> > modules/ssl/ssl_engine_rand.c
> >
> > Now we can compile and use it over ssl even though commenting out non
> > working code is propably a bad thing to do.
> >
> >
> > ./configure --prefix=/service/apache2
> > --exec-prefix=/service/apache2/arch/linux-intel --enable-ssl
> > --with-openssl=/service/apache2/openssl/
> > ...lots of rows...
> > make
> > ...lots of rows...
> > /bin/sh /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol
> > --mode=link gcc -g -O2 -pthread -DLINUX=2 -D_REENTRANT
> > -D_XOPEN_SOURCE=500 -D_BSD_SOURCE -D_SVID_SOURCE
> > -DAP_HAVE_DESIGNATED_INITIALIZER
> > -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude
> > -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include
> > -I/service/apache2/openssl/include
> > -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
> > -I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix
> > -I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/http
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy
> > -I/usr/local/service/apache2/src/httpd-2.0.44/include
> > -I/usr/local/ssl/include/openssl -I/usr/local/ssl/include
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in
> > -export-dynamic
> > -L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/lib
> > -L/usr/local/ssl/lib -o httpd modules.lo modules/aaa/mod_access.la
> > modules/aaa/mod_auth.la modules/filters/mod_include.la
> > modules/loggers/mod_log_config.la modules/metadata/mod_env.la
> > modules/metadata/mod_setenvif.la modules/ssl/mod_ssl.la
> > modules/http/mod_http.la modules/http/mod_mime.la
> > modules/generators/mod_status.la modules/generators/mod_autoindex.la
> > modules/generators/mod_asis.la modules/generators/mod_cgi.la
> > modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la
> > modules/mappers/mod_imap.la modules/mappers/mod_actions.la
> > modules/mappers/mod_userdir.la modules/mappers/mod_alias.la
> > modules/mappers/mod_so.la server/mpm/prefork/libprefork.la
> > server/libmain.la os/unix/libos.la -lssl -lcrypto
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.la
> > -lgdbm -ldb
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib/libexpat.la
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la -lm
> > -lcrypt -lnsl -lresolv -ldl
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> > `ssl_hook_UserCheck':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:875:
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> > `ssl_callback_SSLVerify':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1206:
> > undefined reference to `OPENSSL_free'
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1210:
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> > `ssl_callback_SSLVerify_CRL':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1469:
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function
> > `modssl_proxy_info_log':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel.c:1507:
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_rand.lo): In function
> > `ssl_rand_seed':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:125:
> > undefined reference to `RAND_egd'
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c:163:
> > undefined reference to `RAND_status'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_vars.lo): In function
> > `ssl_var_lookup_ssl_cert':
> > /usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_vars.c:351:
> > undefined reference to `OPENSSL_free'
> >
> > Machine running Linux 2.2.17-14smp (RedHat 6.2)
> > openssl 0.9.7
> > apache 2.0.44
> >
>
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>

--
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com

"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
-- Johnny Hart

testing, only testing, and damn good at it too!

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Problems compiling mod_ssl with apache 2.0.44

yes, I am positive, actually the clients that use FP extensions are =
positive, I am negative, but who listens to me these days.........

hehe

-----Original Message-----
From: R. DuFresne [mailto:dufresne@sysinfo.com]
Sent: Friday, February 07, 2003 9:46 AM
To: modssl-users@modssl.org
Subject: RE: Problems compiling mod_ssl with apache 2.0.44


are you sure you wish to degrade the security of your apache server =
with
front[age extensions? Frontpage and coldfusion have a nasty security
history.


Thanks,

Ron DuFresne


On Fri, 7 Feb 2003, Boulytchev, Vasiliy wrote:

> This is off the modssl track, but has anyone gotten frontpage =
extensions working for httpd-2.0.44? 2.0.40 is the supported version, =
and the install quits if that is not it. Just checking.... =20
>=20
>=20
> -----Original Message-----
> From: Sasa STUPAR [mailto:sasa@stupar.homelinux.net]
> Sent: Friday, February 07, 2003 2:39 AM
> To: modssl-users@modssl.org
> Subject: Re: Problems compiling mod_ssl with apache 2.0.44
>=20
>=20
> I have just succesfully compiled apache 2.0.44 with mod_ssl and =
openssl
> 0.9.7 on RH8. First I have compiled openssl then apache and everything
> works fine. On trick after make install in openssl it doesn't copy
> headers so you have to manually copy them to your install directory.
>=20
> On 2/7/2003 10:25 AM, Erik Melkersson a =E9crit:
> > Hi!
> >=20
> > Thanks for the reply.
> >=20
> > Geoff Thorpe wrote:
> >> ... The kind of linker
> >> error you report usually suggests the code was compiled against one
> >> openssl version's headers, but is trying to link against a =
different
> >> openssl version's libraries....
> >=20
> > Yes, I tried to compile it against different openssl-version and =
didn't=20
> > make clean in betweend (dumb fault by me)
> >=20
> > After cleaning and compiling again we get some other errors.
> > undefined reference to OPENSSL_free, RAND_egd and RAND_status (se =
below=20
> > for complete data)
> >=20
> > In order to make apache compile we
> > - changed OPENSSL_free to CRYPTO_free in a #define in the =
modules/ssl/=20
> > headers file. (As that is done in openssl anyway)
> > - commented out the 3+3 lines where RAND_egd and RAND_status are =
used in=20
> > modules/ssl/ssl_engine_rand.c
> >=20
> > Now we can compile and use it over ssl even though commenting out =
non=20
> > working code is propably a bad thing to do.
> >=20
> >=20
> > ./configure --prefix=3D/service/apache2=20
> > --exec-prefix=3D/service/apache2/arch/linux-intel --enable-ssl=20
> > --with-openssl=3D/service/apache2/openssl/
> > ...lots of rows...
> > make
> > ...lots of rows...
> > /bin/sh =
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libto ol=20
> > --mode=3Dlink gcc -g -O2 -pthread -DLINUX=3D2 -D_REENTRANT=20
> > -D_XOPEN_SOURCE=3D500 -D_BSD_SOURCE -D_SVID_SOURCE=20
> > -DAP_HAVE_DESIGNATED_INITIALIZER=20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/inc lude=20
> > =
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/include=20
> > -I/service/apache2/openssl/include=20
> > =
-I/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/l=
ib=20
> > -I. -I/usr/local/service/apache2/src/httpd-2.0.44/os/unix=20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/server/mpm/pre fork=20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/http=2 0
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/filter s=20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/proxy= 20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/include=20
> > -I/usr/local/ssl/include/openssl -I/usr/local/ssl/include=20
> > -I/usr/local/service/apache2/src/httpd-2.0.44/modules/dav/ma in=20
> > -export-dynamic=20
> > =
-L/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-uti l/xml/expat/l=
ib=20
> > -L/usr/local/ssl/lib -o httpd modules.lo =
modules/aaa/mod_access.la=20
> > modules/aaa/mod_auth.la modules/filters/mod_include.la=20
> > modules/loggers/mod_log_config.la modules/metadata/mod_env.la=20
> > modules/metadata/mod_setenvif.la modules/ssl/mod_ssl.la=20
> > modules/http/mod_http.la modules/http/mod_mime.la=20
> > modules/generators/mod_status.la modules/generators/mod_autoindex.la =

> > modules/generators/mod_asis.la modules/generators/mod_cgi.la=20
> > modules/mappers/mod_negotiation.la modules/mappers/mod_dir.la=20
> > modules/mappers/mod_imap.la modules/mappers/mod_actions.la=20
> > modules/mappers/mod_userdir.la modules/mappers/mod_alias.la=20
> > modules/mappers/mod_so.la server/mpm/prefork/libprefork.la=20
> > server/libmain.la os/unix/libos.la -lssl -lcrypto=20
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/pcre/libp cre.la=20
> > =
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ libaprutil-0.=
la=20
> > -lgdbm -ldb=20
> > =
/usr/local/service/apache2/src/httpd-2.0.44/srclib/apr-util/ xml/expat/lib=
/libexpat.la=20
> > /usr/local/service/apache2/src/httpd-2.0.44/srclib/apr/libap r-0.la =
-lm=20
> > -lcrypt -lnsl -lresolv -ldl
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> > `ssl_hook_UserCheck':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:875:=20
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> > `ssl_callback_SSLVerify':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1206:=20
> > undefined reference to `OPENSSL_free'
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1210:=20
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> > `ssl_callback_SSLVerify_CRL':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1469:=20
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_kernel.lo): In function=20
> > `modssl_proxy_info_log':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_kernel=
..c:1507:=20
> > undefined reference to `OPENSSL_free'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_rand.lo): In function=20
> > `ssl_rand_seed':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c=
:125:=20
> > undefined reference to `RAND_egd'
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_rand.c=
:163:=20
> > undefined reference to `RAND_status'
> > modules/ssl/.libs/mod_ssl.al(ssl_engine_vars.lo): In function=20
> > `ssl_var_lookup_ssl_cert':
> > =
/usr/local/service/apache2/src/httpd-2.0.44/modules/ssl/ssl_ engine_vars.c=
:351:=20
> > undefined reference to `OPENSSL_free'
> >=20
> > Machine running Linux 2.2.17-14smp (RedHat 6.2)
> > openssl 0.9.7
> > apache 2.0.44
> >=20
>=20
>=20
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>=20

--=20
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com

"Cutting the space budget really restores my faith in humanity. It
eliminates dreams, goals, and ideals and lets us get straight to the
business of hate, debauchery, and self-annihilation."
-- Johnny Hart

testing, only testing, and damn good at it too!

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

Hello,

* Erik Melkersson (melker@unit.liu.se) wrote:
> Geoff Thorpe wrote:
> >... The kind of linker
> >error you report usually suggests the code was compiled against one
> >openssl version's headers, but is trying to link against a different
> >openssl version's libraries....
>
> Yes, I tried to compile it against different openssl-version and didn't
> make clean in betweend (dumb fault by me)

Ah, that would've helped :-)

> After cleaning and compiling again we get some other errors.
> undefined reference to OPENSSL_free, RAND_egd and RAND_status (se below
> for complete data)

Erm ...

> In order to make apache compile we
> - changed OPENSSL_free to CRYPTO_free in a #define in the modules/ssl/
> headers file. (As that is done in openssl anyway)
> - commented out the 3+3 lines where RAND_egd and RAND_status are used in
> modules/ssl/ssl_engine_rand.c

None of this should be required if you are compiling against a matching
set of openssl headers and libraries. I suggest for your own benefit
that you get to the bottom of the problem rather than using the tricks
you have - it is known (and in fact reiterated time after time by myself
and other openssl developers) that no binary compatibility should be
assumed from one openssl release to the next until at least version 1.0.
So if you've had to hack to get past the linker stage, and you're so far
lucky enough to have the basic functionality "ok" at run-time without
any noticable explosions, you could still be sitting on a behavioural
time-bomb.

BTW: What you've done w.r.t. RAND_*** functions could cause your server
to either (a) fail handshakes with certain client browsers due to PRNG
problems, or worse (b) appear to negotiate fine with everyone despite
using insecure parameters. Which of those risks is greater rather
depends on how you've hacked apache2's code, but either way it shouldn't
be required if your build environment (and openssl installation) is ok.

> Now we can compile and use it over ssl even though commenting out non
> working code is propably a bad thing to do.

It is, and it could bite you in unknown ways later on. I'd recommend
figuring out why you had to do the things you did to get apache working
- it should be very straightforward and require no such hacking.

Cheers,
Geoff

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

* Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
> I have just succesfully compiled apache 2.0.44 with mod_ssl and openssl
> 0.9.7 on RH8. First I have compiled openssl then apache and everything
> works fine. On trick after make install in openssl it doesn't copy
> headers so you have to manually copy them to your install directory.

It doesn't? It certainly should - can you please double-check this and
report the details to me if it's true? Noone (to my knowledge) has
reported this problem and openssl 0.9.7 has been through a fairly
extensive beta testing period (during which the header installation
didn't AFAICS require any hacking).

Cheers,
Geoff

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

This is a cryptographically signed message in MIME format.

--------------ms040300000500010807040308
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit

No, It doesn't. I have compiled it with prefix /usr/include and
openssldir /usr/include/openssl and there are no headers. I haven't
noticed it on first but when I wanted to compile apache with mod_ssl it
returns an error that it was unable to find headers for ssl.
Is there someone else reporting the same problem ? Maybe is this related
to the RedHat8 distrubution only.

Sasa

On 2/7/2003 7:17 PM, Geoff Thorpe a écrit:
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>> I have just succesfully compiled apache 2.0.44 with mod_ssl and openssl
>> 0.9.7 on RH8. First I have compiled openssl then apache and everything
>> works fine. On trick after make install in openssl it doesn't copy
>> headers so you have to manually copy them to your install directory.
>
> It doesn't? It certainly should - can you please double-check this and
> report the details to me if it's true? Noone (to my knowledge) has
> reported this problem and openssl 0.9.7 has been through a fairly
> extensive beta testing period (during which the header installation
> didn't AFAICS require any hacking).
>
> Cheers,
> Geoff
>


--------------ms040300000500010807040308
Content-Type: application/x-pkcs7-signature; name="smime.p7s"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="smime.p7s"
Content-Description: S/MIME Cryptographic Signature

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH AQAAoIIEzjCC
AmMwggHMAgECMA0GCSqGSIb3DQEBBAUAMIGBMQswCQYDVQQGEwJTSTERMA8G A1UECBMIU2xv
dmVuaWExEDAOBgNVBAcTB01hcmlib3IxHTAbBgNVBAMTFHN0dXBhci5ob21l bGludXgubmV0
MS4wLAYJKoZIhvcNAQkBFh9wb3N0bWFzdGVyQHN0dXBhci5ob21lbGludXgu bmV0MB4XDTAy
MTIxMjExMzY0OVoXDTAzMTIxMjExMzY0OVowcjELMAkGA1UEBhMCU0kxETAP BgNVBAgTCFNs
b3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9yMRQwEgYDVQQDEwtTYXNhIFNUVVBB UjEoMCYGCSqG
SIb3DQEJARYZc2FzYUBzdHVwYXIuaG9tZWxpbnV4Lm5ldDCBnzANBgkqhkiG 9w0BAQEFAAOB
jQAwgYkCgYEAuPDzDL2oxWDqfSyIGvjH7JQTcF+Dn6tM6O2D4IGrgQK2MfAJ Xcd+AaMlwyGq
P3sND4BNo5mgsz7XyTjddvfRaste6UIUDnsbNlUQI+GApPHAoeiBTt7rWbkS YsllVPn3nS1t
indhZIiKWSbDfTRAOxz9Vk1dwmj9L7LoB8WcZ7MCAwEAATANBgkqhkiG9w0B AQQFAAOBgQBz
4fyueMI3+ORCD61BQid7JvCdCVpj7MF4lf4zh+WQpP7klV3/+8OMkLA3TK8E vDoLNeFKgbZZ
STSV6cUGuscfESGn9Kq0M9OMyNFFc/IR2qGgsohEZLa5EScodGUfOJzPlg1K NqXXaV3Aomyq
3WhJ07a2c9kwXpy/flFLlUmccDCCAmMwggHMAgECMA0GCSqGSIb3DQEBBAUA MIGBMQswCQYD
VQQGEwJTSTERMA8GA1UECBMIU2xvdmVuaWExEDAOBgNVBAcTB01hcmlib3Ix HTAbBgNVBAMT
FHN0dXBhci5ob21lbGludXgubmV0MS4wLAYJKoZIhvcNAQkBFh9wb3N0bWFz dGVyQHN0dXBh
ci5ob21lbGludXgubmV0MB4XDTAyMTIxMjExMzY0OVoXDTAzMTIxMjExMzY0 OVowcjELMAkG
A1UEBhMCU0kxETAPBgNVBAgTCFNsb3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9y MRQwEgYDVQQD
EwtTYXNhIFNUVVBBUjEoMCYGCSqGSIb3DQEJARYZc2FzYUBzdHVwYXIuaG9t ZWxpbnV4Lm5l
dDCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEAuPDzDL2oxWDqfSyIGvjH 7JQTcF+Dn6tM
6O2D4IGrgQK2MfAJXcd+AaMlwyGqP3sND4BNo5mgsz7XyTjddvfRaste6UIU DnsbNlUQI+GA
pPHAoeiBTt7rWbkSYsllVPn3nS1tindhZIiKWSbDfTRAOxz9Vk1dwmj9L7Lo B8WcZ7MCAwEA
ATANBgkqhkiG9w0BAQQFAAOBgQBz4fyueMI3+ORCD61BQid7JvCdCVpj7MF4 lf4zh+WQpP7k
lV3/+8OMkLA3TK8EvDoLNeFKgbZZSTSV6cUGuscfESGn9Kq0M9OMyNFFc/IR 2qGgsohEZLa5
EScodGUfOJzPlg1KNqXXaV3Aomyq3WhJ07a2c9kwXpy/flFLlUmccDGCAoAw ggJ8AgEBMIGH
MIGBMQswCQYDVQQGEwJTSTERMA8GA1UECBMIU2xvdmVuaWExEDAOBgNVBAcT B01hcmlib3Ix
HTAbBgNVBAMTFHN0dXBhci5ob21lbGludXgubmV0MS4wLAYJKoZIhvcNAQkB Fh9wb3N0bWFz
dGVyQHN0dXBhci5ob21lbGludXgubmV0AgECMAkGBSsOAwIaBQCgggFOMBgG CSqGSIb3DQEJ
AzELBgkqhkiG9w0BBwEwHAYJKoZIhvcNAQkFMQ8XDTAzMDIwNzE4NTkyNlow IwYJKoZIhvcN
AQkEMRYEFMqWrpf8aR7Iv5jj1bawluFYM9r7MFIGCSqGSIb3DQEJDzFFMEMw CgYIKoZIhvcN
AwcwDgYIKoZIhvcNAwICAgCAMA0GCCqGSIb3DQMCAgFAMAcGBSsOAwIHMA0G CCqGSIb3DQMC
AgEoMIGaBgsqhkiG9w0BCRACCzGBiqCBhzCBgTELMAkGA1UEBhMCU0kxETAP BgNVBAgTCFNs
b3ZlbmlhMRAwDgYDVQQHEwdNYXJpYm9yMR0wGwYDVQQDExRzdHVwYXIuaG9t ZWxpbnV4Lm5l
dDEuMCwGCSqGSIb3DQEJARYfcG9zdG1hc3RlckBzdHVwYXIuaG9tZWxpbnV4 Lm5ldAIBAjAN
BgkqhkiG9w0BAQEFAASBgB7TxmF5vQPgCfL14BhwuA3xqPE9czXIKndtHppW FQ/1rWHW4mDJ
x2/33rfjGAuXFf0F9kSXYhi5tiBoYbacyKnMQJo8EoVA/MPKDwnjtLGE2TD0 PIF80XCn4MP6
cFPqj3W4CsRU1tyGHmDJofW/NP70P2KqallZ/XahErGrVGrnAAAAAAAA
--------------ms040300000500010807040308--

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Problems compiling mod_ssl with apache 2.0.44

I walked around the setups, and it works beautifully, the only thing I =
changed was the ./configure script in /usr/src/apache.blah/ to look in =
the correct folders for my ssl stuff. =20

-----Original Message-----
From: Sasa STUPAR [mailto:sasa@stupar.homelinux.net]
Sent: Friday, February 07, 2003 11:59 AM
To: modssl-users@modssl.org
Subject: Re: Problems compiling mod_ssl with apache 2.0.44


No, It doesn't. I have compiled it with prefix /usr/include and
openssldir /usr/include/openssl and there are no headers. I haven't
noticed it on first but when I wanted to compile apache with mod_ssl it
returns an error that it was unable to find headers for ssl.
Is there someone else reporting the same problem ? Maybe is this related
to the RedHat8 distrubution only.

Sasa

On 2/7/2003 7:17 PM, Geoff Thorpe a =E9crit:
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>> I have just succesfully compiled apache 2.0.44 with mod_ssl and =
openssl
>> 0.9.7 on RH8. First I have compiled openssl then apache and =
everything
>> works fine. On trick after make install in openssl it doesn't copy
>> headers so you have to manually copy them to your install directory.
>=20
> It doesn't? It certainly should - can you please double-check this and
> report the details to me if it's true? Noone (to my knowledge) has
> reported this problem and openssl 0.9.7 has been through a fairly
> extensive beta testing period (during which the header installation
> didn't AFAICS require any hacking).
>=20
> Cheers,
> Geoff
>=20

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

* Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
> No, It doesn't. I have compiled it with prefix /usr/include and
> openssldir /usr/include/openssl and there are no headers. I haven't
> noticed it on first but when I wanted to compile apache with mod_ssl it
> returns an error that it was unable to find headers for ssl.
> Is there someone else reporting the same problem ? Maybe is this related
> to the RedHat8 distrubution only.

Well RH8 has openssl bundled though probably not with the headers, and I
can't say much else about what RH might be doing because I don't use it.
However, trying to install to a prefix of /usr/include would be pretty
terrible - as it will install all binaries, libraries, and include files
in *sub-directories* of /usr/include! Are you sure you did this, or did
you mean /usr/local?

Anyway, I'd be interested to see a log of this problem if you wouldn't
mind? If there's an openssl bug inside it, I'll try and get it
identified and fixed for the next release (0.9.7a). Eg. could you please
repeat your steps and send me the logs as;
# ./config [...] 1> c1.log 2> c2.log
# make [...] 1> m1.log 2> m2.log
# make install 1> i1.log 2> i2.log
or something like that?

Cheers,
Geoff

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

I have just got an email from another user of RH8 which has the same
problem. I have told him to post it on the list. So looks like there is
a problem.

Sasa

On 2/8/2003 12:48 AM, Geoff Thorpe a écrit:
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>> No, It doesn't. I have compiled it with prefix /usr/include and
>> openssldir /usr/include/openssl and there are no headers. I haven't
>> noticed it on first but when I wanted to compile apache with mod_ssl it
>> returns an error that it was unable to find headers for ssl.
>> Is there someone else reporting the same problem ? Maybe is this related
>> to the RedHat8 distrubution only.
>
> Well RH8 has openssl bundled though probably not with the headers, and I
> can't say much else about what RH might be doing because I don't use it.
> However, trying to install to a prefix of /usr/include would be pretty
> terrible - as it will install all binaries, libraries, and include files
> in *sub-directories* of /usr/include! Are you sure you did this, or did
> you mean /usr/local?
>
> Anyway, I'd be interested to see a log of this problem if you wouldn't
> mind? If there's an openssl bug inside it, I'll try and get it
> identified and fixed for the next release (0.9.7a). Eg. could you please
> repeat your steps and send me the logs as;
> # ./config [...] 1> c1.log 2> c2.log
> # make [...] 1> m1.log 2> m2.log
> # make install 1> i1.log 2> i2.log
> or something like that?
>
> Cheers,
> Geoff
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

I have forgot...Original instalation of RH8 has openssl in
/usr/include/openssl and there are all the headers. Since this is a
version 0.9.6.b I have decided to upgrade. I have made
prefix=/usr/include and openssldir=/usr/include/openssl. So after the
instalation it put the binary dir to /usr/include and to the
/usr/include/openssl dirs apps, lib,etc. In /usr/include there are no
headers so I have manually copy them to /usr/include/openssl.

On 2/8/2003 12:48 AM, Geoff Thorpe a écrit:
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>> No, It doesn't. I have compiled it with prefix /usr/include and
>> openssldir /usr/include/openssl and there are no headers. I haven't
>> noticed it on first but when I wanted to compile apache with mod_ssl it
>> returns an error that it was unable to find headers for ssl.
>> Is there someone else reporting the same problem ? Maybe is this related
>> to the RedHat8 distrubution only.
>
> Well RH8 has openssl bundled though probably not with the headers, and I
> can't say much else about what RH might be doing because I don't use it.
> However, trying to install to a prefix of /usr/include would be pretty
> terrible - as it will install all binaries, libraries, and include files
> in *sub-directories* of /usr/include! Are you sure you did this, or did
> you mean /usr/local?
>
> Anyway, I'd be interested to see a log of this problem if you wouldn't
> mind? If there's an openssl bug inside it, I'll try and get it
> identified and fixed for the next release (0.9.7a). Eg. could you please
> repeat your steps and send me the logs as;
> # ./config [...] 1> c1.log 2> c2.log
> # make [...] 1> m1.log 2> m2.log
> # make install 1> i1.log 2> i2.log
> or something like that?
>
> Cheers,
> Geoff
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

Ok, I have found the problem. If you want to have files in the same
directories as original instalation of RH8 you have to use "./config
--prefix=/usr". Sorry for that confusion. It is the distribution which
is strange.

Sasa

On 2/8/2003 10:22 AM, Sasa STUPAR a écrit:
> I have forgot...Original instalation of RH8 has openssl in
> /usr/include/openssl and there are all the headers. Since this is a
> version 0.9.6.b I have decided to upgrade. I have made
> prefix=/usr/include and openssldir=/usr/include/openssl. So after the
> instalation it put the binary dir to /usr/include and to the
> /usr/include/openssl dirs apps, lib,etc. In /usr/include there are no
> headers so I have manually copy them to /usr/include/openssl.
>
> On 2/8/2003 12:48 AM, Geoff Thorpe a écrit:
>> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>>> No, It doesn't. I have compiled it with prefix /usr/include and
>>> openssldir /usr/include/openssl and there are no headers. I haven't
>>> noticed it on first but when I wanted to compile apache with mod_ssl it
>>> returns an error that it was unable to find headers for ssl.
>>> Is there someone else reporting the same problem ? Maybe is this related
>>> to the RedHat8 distrubution only.
>>
>> Well RH8 has openssl bundled though probably not with the headers, and I
>> can't say much else about what RH might be doing because I don't use it.
>> However, trying to install to a prefix of /usr/include would be pretty
>> terrible - as it will install all binaries, libraries, and include files
>> in *sub-directories* of /usr/include! Are you sure you did this, or did
>> you mean /usr/local?
>>
>> Anyway, I'd be interested to see a log of this problem if you wouldn't
>> mind? If there's an openssl bug inside it, I'll try and get it
>> identified and fixed for the next release (0.9.7a). Eg. could you please
>> repeat your steps and send me the logs as;
>> # ./config [...] 1> c1.log 2> c2.log
>> # make [...] 1> m1.log 2> m2.log
>> # make install 1> i1.log 2> i2.log
>> or something like that?
>>
>> Cheers,
>> Geoff
>>
>
>
> ____________________________________________________________ __________
> Apache Interface to OpenSSL (mod_ssl) www.modssl.org
> User Support Mailing List modssl-users@modssl.org
> Automated List Manager majordomo@modssl.org
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

* Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
> Ok, I have found the problem. If you want to have files in the same
> directories as original instalation of RH8 you have to use "./config
> --prefix=/usr". Sorry for that confusion. It is the distribution which
> is strange.

Phew, I was starting to wonder what I was missing here :-) As I
mentioned originally, using "/usr/include" as an installation prefix
doesn't make sense because it will create the standard {include,bin,man}
tree beneath that and install. Hence "/usr" or "/usr/local" make more
sense. Also, especially on package management systems like RH, you're
better not to simply install *over* existing files, particularly as a
newer version of openssl may have removed headers that were in a
previous version, so the old ones will end up mixed up with the new
ones. And of course if a bug-fix release is made by RH to the older
version, eg. 0.9.6x, that could seriously screw things up if you'd
installed 0.9.7 over the top. It could also totally mangle your system's
RPM database, and various other carnage is possible.

The solution is to either grapple with RH's dependencies to try and
build a replacement openssl RPM from source to upgrade to (which many
will tell you is an only slightly less difficult problem than the
alchemy of gold itself) or to install openssl elsewhere and make sure
your system paths are organised appropriately. Eg. you could use
/usr/local or /opt as a place to manually install packages such as a
newer openssl, and make sure that the bin subdirectory is earlier in
PATH than /usr/bin, ditto for the lib subdirectory in /etc/ld.so.conf,
the man subdirectory in /etc/man.config, and so on ...

BTW: You should check your /usr/include tree that there aren't bits and
pieces of openssl cruft in there left over from your previous efforts -
eg. your previous installation attempts probably created weird
directories like /usr/include/bin, /usr/include/include, etc.

Cheers,
Geoff

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

Prior to the instalation I have manually removed old version of Openssl
and other dirs from my previous installs and I have no
problem...everything works well.

Thanks for info.

Sasa

On 2/8/2003 7:08 PM, Geoff Thorpe a écrit:
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
>> Ok, I have found the problem. If you want to have files in the same
>> directories as original instalation of RH8 you have to use "./config
>> --prefix=/usr". Sorry for that confusion. It is the distribution which
>> is strange.
>
> Phew, I was starting to wonder what I was missing here :-) As I
> mentioned originally, using "/usr/include" as an installation prefix
> doesn't make sense because it will create the standard {include,bin,man}
> tree beneath that and install. Hence "/usr" or "/usr/local" make more
> sense. Also, especially on package management systems like RH, you're
> better not to simply install *over* existing files, particularly as a
> newer version of openssl may have removed headers that were in a
> previous version, so the old ones will end up mixed up with the new
> ones. And of course if a bug-fix release is made by RH to the older
> version, eg. 0.9.6x, that could seriously screw things up if you'd
> installed 0.9.7 over the top. It could also totally mangle your system's
> RPM database, and various other carnage is possible.
>
> The solution is to either grapple with RH's dependencies to try and
> build a replacement openssl RPM from source to upgrade to (which many
> will tell you is an only slightly less difficult problem than the
> alchemy of gold itself) or to install openssl elsewhere and make sure
> your system paths are organised appropriately. Eg. you could use
> /usr/local or /opt as a place to manually install packages such as a
> newer openssl, and make sure that the bin subdirectory is earlier in
> PATH than /usr/bin, ditto for the lib subdirectory in /etc/ld.so.conf,
> the man subdirectory in /etc/man.config, and so on ...
>
> BTW: You should check your /usr/include tree that there aren't bits and
> pieces of openssl cruft in there left over from your previous efforts -
> eg. your previous installation attempts probably created weird
> directories like /usr/include/bin, /usr/include/include, etc.
>
> Cheers,
> Geoff
>


____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

Re: Problems compiling mod_ssl with apache 2.0.44

* Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
> Prior to the instalation I have manually removed old version of Openssl
> and other dirs from my previous installs and I have no
> problem...everything works well.

Really? I'm surprised, but happy. RH typically build everything with
shared-library dependencies on openssl libs, so either you're running no
openssl-dependant software, or you're getting "lucky" with software
built for 0.9.6 linking with 0.9.7 ... eg. ssh is possibly doing this.
Anyway, I leave you and RH to get along with one another in whatever
manner suits you both :-)

Cheers,
Geoff

--
Geoff Thorpe
geoff@geoffthorpe.net
http://www.geoffthorpe.net/

____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org

RE: Problems compiling mod_ssl with apache 2.0.44

> -----Original Message-----
> From: Geoff Thorpe [mailto:geoff@geoffthorpe.net]
> Sent: 08 February 2003 18:08
> To: modssl-users@modssl.org
> Subject: Re: Problems compiling mod_ssl with apache 2.0.44
>
>
> * Sasa STUPAR (sasa@stupar.homelinux.net) wrote:
> > Ok, I have found the problem. If you want to have files in the same
> > directories as original instalation of RH8 you have to use "./config
> > --prefix=/usr". Sorry for that confusion. It is the
> distribution which
> > is strange.
>
> Phew, I was starting to wonder what I was missing here :-) As I
> mentioned originally, using "/usr/include" as an installation prefix
> doesn't make sense because it will create the standard
> {include,bin,man}
> tree beneath that and install. Hence "/usr" or "/usr/local" make more
> sense. Also, especially on package management systems like RH, you're
> better not to simply install *over* existing files, particularly as a
> newer version of openssl may have removed headers that were in a
> previous version, so the old ones will end up mixed up with the new
> ones. And of course if a bug-fix release is made by RH to the older
> version, eg. 0.9.6x, that could seriously screw things up if you'd
> installed 0.9.7 over the top. It could also totally mangle
> your system's
> RPM database, and various other carnage is possible.
>
> The solution is to either grapple with RH's dependencies to try and
> build a replacement openssl RPM from source to upgrade to (which many
> will tell you is an only slightly less difficult problem than the
> alchemy of gold itself) or to install openssl elsewhere and make sure
> your system paths are organised appropriately. Eg. you could use
> /usr/local or /opt as a place to manually install packages such as a
> newer openssl, and make sure that the bin subdirectory is earlier in
> PATH than /usr/bin, ditto for the lib subdirectory in /etc/ld.so.conf,
> the man subdirectory in /etc/man.config, and so on ...
>
Actually, it shouldn't make any difference to the installed RPM of
openssl-0.9.6b, provided that /usr/bin/openssl isn't overwritten. The
quickest way to check is with "rpm -V openssl", which should return no
response. All your other points above are valid though. It is probably best
though to put newer stuff for Red Hat under /usr/local so you don't break
anything installed.

Now, upgrading openssl-0.9.6 on a Red Hat box (7.0-8.0 inclusive) will screw
things up bigtime (see the specific section in the openssl FAQ).

If there's sufficient demand I'll make up an openssl 0.9.7 RPM for RedHat
users. So far no-one has asked...

-
John Airey, BSc (Jt Hons), CNA, RHCE
Internet systems support officer, ITCSD, Royal National Institute of the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 John.Airey@rnib.org.uk

Am I the only person in the UK who finds it strange that our Prime Minister
complains of Human Rights abuses around the world, yet wishes to opt out of
the European Convention of Human Rights?

-

NOTICE: The information contained in this email and any attachments is
confidential and may be legally privileged. If you are not the
intended recipient you are hereby notified that you must not use,
disclose, distribute, copy, print or rely on this email's content. If
you are not the intended recipient, please notify the sender
immediately and then delete the email and any attachments from your
system.

RNIB has made strenuous efforts to ensure that emails and any
attachments generated by its staff are free from viruses. However, it
cannot accept any responsibility for any viruses which are
transmitted. We therefore recommend you scan all attachments.

Please note that the statements and views expressed in this email
and any attachments are those of the author and do not necessarily
represent those of RNIB.

RNIB Registered Charity Number: 226227

Website: http://www.rnib.org.uk
____________________________________________________________ __________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List modssl-users@modssl.org
Automated List Manager majordomo@modssl.org