help compiling apache 2.2.14 and openssl-0.9.8l using vs2008

am 08.01.2010 04:31:44 von HC

I need to compile apache2.2.14 for windows because of cve-2009-3555.
It is my understanding
for that problem I need to compile apache with openssl-0.9.8l instead
of the previous which was used in
the 2.2.14 binary, which was I believe, 0.9.8k.

but I ran into a couple questions/issues. so if anyone has already
figured this out I'd really appreciate
the advice.

These are the instructions I am following:
http://httpd.apache.org/docs/2.2/platform/win_compiling.html

That instructs us to apply 3 patches.
http://www.apache.org/dist/httpd/binaries/win32/patches_appl ied/
2 of those patches appear to be for previous versions of openssl?
I am no patch expert. Does there need to be another patch for this
version of openssl?
Anyone have any idea?

In any case try to do this step;
"perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
-Ipath/to/srclib/zlib -Lpath/to/srclib/zlib
ms\do_masm.bat
nmake -f ms\ntdll.mak"

I get an error from the last command:
E:\apache\httpd-2.2.14\srclib\openssl\openssl-0.9.8l>nmake -f ms\ntdll.mak

"Microsoft (R) Program Maintenance Utility Version 9.00.30729.01
Copyright (C) Microsoft Corporation. All rights reserved.

' in macroak(610) : fatal error U1001: syntax error : illegal character '
Stop.
"
Unfortunately that is way over my head. Anyone see what should be changed here?
it has a control-m between SSL and OBJ on line 612. I suspect that is
not correct but what should
be there? On the other hand it is complaining about a quote mark.
610 $(OBJ_D)\e_ubsec.obj $(OBJ_D)\engines.obj $(OBJ_D)\e_capi.obj
611
612 SSL OBJ=$(OBJ_D)\ssl.obj \

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: help compiling apache 2.2.14 and openssl-0.9.8l

am 08.01.2010 06:00:06 von Pravesh Rai

Even we had tried this scenario, but there are several (deprecated)
files, which are required for building these components, are not
bundled with VS 2008.

All these issues needs to be looked on case-by-case basis.

Thanks,
Pravesh

On Fri, Jan 8, 2010 at 9:01 AM, hc wrote:
> I need to compile apache2.2.14 for windows because of cve-2009-3555.
> It is my understanding
> for that problem I need to compile apache with openssl-0.9.8l instead
> of the previous which was used in
> the 2.2.14 binary, =A0which was I believe, =A00.9.8k.
>
> but I ran into a couple questions/issues. so if anyone has already
> figured this out I'd really appreciate
> the advice.
>
> These are the instructions I am following:
> http://httpd.apache.org/docs/2.2/platform/win_compiling.html
>
> That instructs us to apply 3 patches.
> http://www.apache.org/dist/httpd/binaries/win32/patches_appl ied/
> 2 of those patches appear to be for previous versions of openssl?
> I am no patch expert. Does there need to be another patch for this
> version of openssl?
> Anyone have any idea?
>
> In any case try to do this step;
> "perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
> -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib
> ms\do_masm.bat
> nmake -f ms\ntdll.mak"
>
> I get an error from the last command:
> E:\apache\httpd-2.2.14\srclib\openssl\openssl-0.9.8l>nmake -f ms\ntdll.ma=
k
>
> "Microsoft (R) Program Maintenance Utility Version 9.00.30729.01
> Copyright (C) Microsoft Corporation. =A0All rights reserved.
>
> ' in macroak(610) : fatal error U1001: syntax error : illegal character '
> Stop.
> "
> Unfortunately that is way over my head. Anyone see what should be changed=
here?
> it has a control-m between SSL and OBJ on line 612. I suspect that is
> not correct but what should
> be there? On the other hand it is complaining about a quote mark.
> 610 =A0 =A0 $(OBJ_D)\e_ubsec.obj $(OBJ_D)\engines.obj $(OBJ_D)\e_capi.obj
> 611
> 612 SSL =A0OBJ=3D$(OBJ_D)\ssl.obj \
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project=
..
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: help compiling apache 2.2.14 and openssl-0.9.8l

am 08.01.2010 17:15:24 von HC

I'm not sure what you mean but thanks for responding. Do you mean it
won't compile
with vs2008 but instead something older? I probably have a older version of=
vs
in a closet somewhere...How are you finding out what is missing?

On Thu, Jan 7, 2010 at 11:00 PM, Pravesh Rai wrote:
> Even we had tried this scenario, but there are several (deprecated)
> files, which are required for building these components, are not
> bundled with VS 2008.
>
> All these issues needs to be looked on case-by-case basis.
>
> Thanks,
> Pravesh
>
> On Fri, Jan 8, 2010 at 9:01 AM, hc wrote:
>> I need to compile apache2.2.14 for windows because of cve-2009-3555.
>> It is my understanding
>> for that problem I need to compile apache with openssl-0.9.8l instead
>> of the previous which was used in
>> the 2.2.14 binary, =A0which was I believe, =A00.9.8k.
>>
>> but I ran into a couple questions/issues. so if anyone has already
>> figured this out I'd really appreciate
>> the advice.
>>
>> These are the instructions I am following:
>> http://httpd.apache.org/docs/2.2/platform/win_compiling.html
>>
>> That instructs us to apply 3 patches.
>> http://www.apache.org/dist/httpd/binaries/win32/patches_appl ied/
>> 2 of those patches appear to be for previous versions of openssl?
>> I am no patch expert. Does there need to be another patch for this
>> version of openssl?
>> Anyone have any idea?
>>
>> In any case try to do this step;
>> "perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
>> -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib
>> ms\do_masm.bat
>> nmake -f ms\ntdll.mak"
>>
>> I get an error from the last command:
>> E:\apache\httpd-2.2.14\srclib\openssl\openssl-0.9.8l>nmake -f ms\ntdll.m=
ak
>>
>> "Microsoft (R) Program Maintenance Utility Version 9.00.30729.01
>> Copyright (C) Microsoft Corporation. =A0All rights reserved.
>>
>> ' in macroak(610) : fatal error U1001: syntax error : illegal character =
'
>> Stop.
>> "
>> Unfortunately that is way over my head. Anyone see what should be change=
d here?
>> it has a control-m between SSL and OBJ on line 612. I suspect that is
>> not correct but what should
>> be there? On the other hand it is complaining about a quote mark.
>> 610 =A0 =A0 $(OBJ_D)\e_ubsec.obj $(OBJ_D)\engines.obj $(OBJ_D)\e_capi.ob=
j
>> 611
>> 612 SSL =A0OBJ=3D$(OBJ_D)\ssl.obj \
>>
>> ------------------------------------------------------------ ---------
>> The official User-To-User support forum of the Apache HTTP Server Projec=
t.
>> See for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project=
..
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: help compiling apache 2.2.14 and openssl-0.9.8l

am 09.01.2010 04:32:00 von Pravesh Rai

We had tried to use VS 2008 to build Apache & Openssl, but face many
difficulties (because of some missing files) & finally came back to VS
2005.

Thanks,
Pravesh

On Fri, Jan 8, 2010 at 9:45 PM, hc wrote:
> I'm not sure what you mean but thanks for responding. Do you mean it
> won't compile
> with vs2008 but instead something older? I probably have a older version =
of vs
> in a closet somewhere...How are you finding out what is missing?
>
> On Thu, Jan 7, 2010 at 11:00 PM, Pravesh Rai wrot=
e:
>> Even we had tried this scenario, but there are several (deprecated)
>> files, which are required for building these components, are not
>> bundled with VS 2008.
>>
>> All these issues needs to be looked on case-by-case basis.
>>
>> Thanks,
>> Pravesh
>>
>> On Fri, Jan 8, 2010 at 9:01 AM, hc wrote:
>>> I need to compile apache2.2.14 for windows because of cve-2009-3555.
>>> It is my understanding
>>> for that problem I need to compile apache with openssl-0.9.8l instead
>>> of the previous which was used in
>>> the 2.2.14 binary, =A0which was I believe, =A00.9.8k.
>>>
>>> but I ran into a couple questions/issues. so if anyone has already
>>> figured this out I'd really appreciate
>>> the advice.
>>>
>>> These are the instructions I am following:
>>> http://httpd.apache.org/docs/2.2/platform/win_compiling.html
>>>
>>> That instructs us to apply 3 patches.
>>> http://www.apache.org/dist/httpd/binaries/win32/patches_appl ied/
>>> 2 of those patches appear to be for previous versions of openssl?
>>> I am no patch expert. Does there need to be another patch for this
>>> version of openssl?
>>> Anyone have any idea?
>>>
>>> In any case try to do this step;
>>> "perl Configure no-rc5 no-idea enable-mdc2 enable-zlib VC-WIN32
>>> -Ipath/to/srclib/zlib -Lpath/to/srclib/zlib
>>> ms\do_masm.bat
>>> nmake -f ms\ntdll.mak"
>>>
>>> I get an error from the last command:
>>> E:\apache\httpd-2.2.14\srclib\openssl\openssl-0.9.8l>nmake -f ms\ntdll.=
mak
>>>
>>> "Microsoft (R) Program Maintenance Utility Version 9.00.30729.01
>>> Copyright (C) Microsoft Corporation. =A0All rights reserved.
>>>
>>> ' in macroak(610) : fatal error U1001: syntax error : illegal character=
'
>>> Stop.
>>> "
>>> Unfortunately that is way over my head. Anyone see what should be chang=
ed here?
>>> it has a control-m between SSL and OBJ on line 612. I suspect that is
>>> not correct but what should
>>> be there? On the other hand it is complaining about a quote mark.
>>> 610 =A0 =A0 $(OBJ_D)\e_ubsec.obj $(OBJ_D)\engines.obj $(OBJ_D)\e_capi.o=
bj
>>> 611
>>> 612 SSL =A0OBJ=3D$(OBJ_D)\ssl.obj \
>>>
>>> ------------------------------------------------------------ ---------
>>> The official User-To-User support forum of the Apache HTTP Server Proje=
ct.
>>> See for more info.
>>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>>> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
>>> For additional commands, e-mail: users-help@httpd.apache.org
>>>
>>>
>>
>> ------------------------------------------------------------ ---------
>> The official User-To-User support forum of the Apache HTTP Server Projec=
t.
>> See for more info.
>> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
>> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
>> For additional commands, e-mail: users-help@httpd.apache.org
>>
>>
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project=
..
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> =A0 " =A0 from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: help compiling apache 2.2.14 and openssl-0.9.8lusing vs2008

am 10.01.2010 19:32:33 von Tom Donovan

hc wrote:
> I need to compile apache2.2.14 for windows because of cve-2009-3555.
> It is my understanding
> for that problem I need to compile apache with openssl-0.9.8l instead
> of the previous which was used in
> the 2.2.14 binary, which was I believe, 0.9.8k.
>
> but I ran into a couple questions/issues. so if anyone has already
> figured this out I'd really appreciate
> the advice.
>
> These are the instructions I am following:
> http://httpd.apache.org/docs/2.2/platform/win_compiling.html

There is a WiKi page at http://wiki.apache.org/httpd/Win32VC9Build which may help you build Apache
for Windows using the command-line compiler in the Windows SDK.

The patches to OpenSSL are not necessary, unless you plan on debugging OpenSSL.

-tom-

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: help compiling apache 2.2.14 and openssl-0.9.8l

am 11.01.2010 03:05:30 von HC

Thanks a lot! I didn't even think of this:
"If you copy Apache to another machine, remember to install the
Microsoft Visual C++ 2008 Redistributable Package
http://www.microsoft.com/downloads/details.aspx?FamilyID=9B2 DA534-3E03-4391-8A4D-074B9F2BC1BF&displaylang=en
before running it"

On 1/10/10, Tom Donovan wrote:
> hc wrote:
>> I need to compile apache2.2.14 for windows because of cve-2009-3555.
>> It is my understanding
>> for that problem I need to compile apache with openssl-0.9.8l instead
>> of the previous which was used in
>> the 2.2.14 binary, which was I believe, 0.9.8k.
>>
>> but I ran into a couple questions/issues. so if anyone has already
>> figured this out I'd really appreciate
>> the advice.
>>
>> These are the instructions I am following:
>> http://httpd.apache.org/docs/2.2/platform/win_compiling.html
>
> There is a WiKi page at http://wiki.apache.org/httpd/Win32VC9Build which may
> help you build Apache
> for Windows using the command-line compiler in the Windows SDK.
>
> The patches to OpenSSL are not necessary, unless you plan on debugging
> OpenSSL.
>
> -tom-
>
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>
>

------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org