How do I pick up correct version of SSL

I have just created a new server running Red Hat EL5.4. I decided to
update the version of Apache to 2.2.14 at the same time.

I compiled with "enable-ssl=" but the log shows that
the openssl in use is the default shipped with the operating system.
How do I get Apache to pick up the proper openssl version?

I have a horrible feeling that I have missed something important in the
config but I have had no success so far in finding it.

Thanks in advance.

John




------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: How do I pick up correct version of SSL

--0050450144a6bb0e7a04802881f3
Content-Type: text/plain; charset=ISO-8859-1

Include --with-ssl=/path_to_your_ssl in the configure command

On Feb 22, 2010 2:47 PM, "John Iliffe" wrote:

I have just created a new server running Red Hat EL5.4. I decided to
update the version of Apache to 2.2.14 at the same time.

I compiled with "enable-ssl=" but the log shows that
the openssl in use is the default shipped with the operating system.
How do I get Apache to pick up the proper openssl version?

I have a horrible feeling that I have missed something important in the
config but I have had no success so far in finding it.

Thanks in advance.

John




------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

--0050450144a6bb0e7a04802881f3
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable

Include --with-ssl=3D/path_to_your_ssl in the configure command

On Feb 22, 2010 2:47 PM, "John Iliffe&quo=
t; <&g=
t; wrote:

I have just created a new server running Red Hat EL5.4. =
=A0I decided to


update the version of Apache to 2.2.14 at the same time.



I compiled with "enable-ssl=3D<path to openssl>" but the lo=
g shows that

the openssl in use is the default shipped with the operating system.

How do I get Apache to pick up the proper openssl version?



I have a horrible feeling that I have missed something important in the

config but I have had no success so far in finding it.



Thanks in advance.



John









------------------------------------------------------------ ---------

The official User-To-User support forum of the Apache HTTP Server Project.<=
br>
See <URL: lank">http://httpd.apache.org/userslist.html> for more info.

To unsubscribe, e-mail: g">users-unsubscribe@httpd.apache.org

=A0 " =A0 from the digest: @httpd.apache.org">users-digest-unsubscribe@httpd.apache.org

For additional commands, e-mail: org">users-help@httpd.apache.org

Re: How do I pick up correct version of SSL

Thanks, I completely missed that.

One question before I fix it: do I have to recompile Apache or is there
some way to update the existing? At this point, no problem, but what
happens next time they update openssl, or any other module for that
matter?

Regards,

John
======================================================
On Mon, 2010-22-02 at 15:02 +1100, Igor Cicimov wrote:
> Include --with-ssl=/path_to_your_ssl in the configure command
>
> > On Feb 22, 2010 2:47 PM, "John Iliffe"
> > wrote:
> >
> > I have just created a new server running Red Hat EL5.4. I decided
> > to
> > update the version of Apache to 2.2.14 at the same time.
> >
> > I compiled with "enable-ssl=" but the log shows
> > that
> > the openssl in use is the default shipped with the operating system.
> > How do I get Apache to pick up the proper openssl version?
> >
> > I have a horrible feeling that I have missed something important in
> > the
> > config but I have had no success so far in finding it.
> >
> > Thanks in advance.
> >
> > John
> >
> >
> >
> >
> > ------------------------------------------------------------ ---------
> > The official User-To-User support forum of the Apache HTTP Server
> > Project.
> > See for more info.
> > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands, e-mail: users-help@httpd.apache.org
> >
>


------------------------------------------------------------ ---------
The official User-To-User support forum of the Apache HTTP Server Project.
See for more info.
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
" from the digest: users-digest-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org

Re: How do I pick up correct version of SSL

--Apple-Mail-15-817713501
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii


On Feb 21, 2010, at 7:17 PM, John Iliffe wrote:

> I have just created a new server running Red Hat EL5.4. I decided to
> update the version of Apache to 2.2.14 at the same time.
>=20
> I compiled with "enable-ssl=3D" but the log shows =
that
> the openssl in use is the default shipped with the operating system.
> How do I get Apache to pick up the proper openssl version?

Two issues:

1) As Igor points out, --with-ssl=3D/foo/bar/openssl steers the Apache =
build system to the OpenSSL installed under /foo/bar. The build system =
will pick up the include and lib subdirectories. If your OpenSSL is =
0.9.8x, you may have to set and export =
LD_LIBRARY_PATH=3D/foo/bar/openssl/lib before you ./configure to make =
the test programs pick up the right libraries as opposed to the system =
copies. =20

2) At runtime, the httpd binary needs to find the libssl.so and =
libcrypto.so. It seems that on Linux (or in the httpd build system in =
particular), rpath doesn't work so the path to the libraries is not =
hardcoded in the binaries. If you compiled against your own OpenSSL =
0.9.8x, the runtime will pick up the system copy unless you set and =
export LD_LIBRARY_PATH=3D/foo/bar/openssl/lib on the shell that starts =
the webserver. A couple of LoadFile directives in your config may also =
help.=20

3) It gets worse. On Red Hat, the C library links against OpenSSL for =
the Kerberos stuff, and EVERYTHING (including httpd) links against the C =
library. This means that the system copy of OpenSSL gets loaded when =
httpd starts, before it loads mod_ssl.so and resolves the dynamic =
library bits in it. Hence, you are likely to end up pulling in the =
system OpenSSL, whatever steps from 2) above you might try to make it =
otherwise. Nor will tearing out your hair help. If your own OpenSSL is =
not 0.9.8x (but 1.0.0z or 0.9.7y), this should not be a problem. =20

Enjoy,=20

S.

> I have a horrible feeling that I have missed something important in =
the
> config but I have had no success so far in finding it.
>=20
> Thanks in advance.
>=20
> John
>=20
>=20
>=20
>=20
> ------------------------------------------------------------ ---------
> The official User-To-User support forum of the Apache HTTP Server =
Project.
> See for more info.
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> " from the digest: users-digest-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
>=20
>=20



--=20
Sander Temme
sctemme@apache.org
PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF




--Apple-Mail-15-817713501
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64

MIAGCSqGSIb3DQEHAqCAMIACAQExCzAJBgUrDgMCGgUAMIAGCSqGSIb3DQEH AQAAoIIFMzCCBS8w
ggMXoAMCAQICAwVx1DANBgkqhkiG9w0BAQUFADB5MRAwDgYDVQQKEwdSb290 IENBMR4wHAYDVQQL
ExVodHRwOi8vd3d3LmNhY2VydC5vcmcxIjAgBgNVBAMTGUNBIENlcnQgU2ln bmluZyBBdXRob3Jp
dHkxITAfBgkqhkiG9w0BCQEWEnN1cHBvcnRAY2FjZXJ0Lm9yZzAeFw0wODA3 MDYxNTQzMzRaFw0x
MDA3MDYxNTQzMzRaMDoxFTATBgNVBAMTDFNhbmRlciBUZW1tZTEhMB8GCSqG SIb3DQEJARYSc2N0
ZW1tZUBhcGFjaGUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKsWFApS17cR
51oTARVEphn9w7VKL2p+HqnTJOF7CnihobEp4um9w3c0bcbXruKbjfwzBiaR Av0BGkOezB8XuHpQ
r3abklf7bkvFqYHLaj9ANm2wj2qrUXasaPgsOIXNiPa0qkpxBHk8Of43Q/Jx v4YGF11DvTfXPpbl
qXkJ07pk6fC3MSDAsZc5mdGtIhDY/LGgxr/A6NhwTG3hxwE9zPt/B7v/bctU 4ZWxloeC/eCpCYUU
fk3BGwoU53iEXyMpe/Kz2iIyZe5dimDeOigqC3Cye99EvtjL2ZavRsqL00j5 M9q/MPYh1WsgVOaZ
WxpEnnd+e5kPTjTL7hAbJzv7cwIDAQABo4H+MIH7MAwGA1UdEwEB/wQCMAAw VgYJYIZIAYb4QgEN
BEkWR1RvIGdldCB5b3VyIG93biBjZXJ0aWZpY2F0ZSBmb3IgRlJFRSBoZWFk IG92ZXIgdG8gaHR0
cDovL3d3dy5DQWNlcnQub3JnMEAGA1UdJQQ5MDcGCCsGAQUFBwMEBggrBgEF BQcDAgYKKwYBBAGC
NwoDBAYKKwYBBAGCNwoDAwYJYIZIAYb4QgQBMDIGCCsGAQUFBwEBBCYwJDAi BggrBgEFBQcwAYYW
aHR0cDovL29jc3AuY2FjZXJ0Lm9yZzAdBgNVHREEFjAUgRJzY3RlbW1lQGFw YWNoZS5vcmcwDQYJ
KoZIhvcNAQEFBQADggIBAITHPZWMXBXh1rSeQ9yJoMBXr0b5bOxUX3V/KsgY LCTu5d0GNB2HHjcq
dHSxbIm7ezIGxTFA491q9wOHQZmYvQzMV2zQUqLrZmNFYPCC1/Q5Gw43CnYQ 0StGX2frOKNIp7fM
KpXux9jjao8sG1Sa0ubclAx3u50wz3k9mEfFhtrZsYLWbruitZeozslMJhG8 tFoRH7J68QmhnyCK
GniNLSu4K6SykM5DOH3GzDKsbjiPqQ7Y+h8qj309oO81fAWo6JdcVdxivFS7 KgHAt+nQS1oaiSeV
W25idOBsTiwWBxkcfq3DltK0HZe6QWMYYvgq2BoHAwGGy+wHjEk8dc/rtf4H Anpee/3Quc3lN+IK
UHYC2RlgtG2JirizdUhkxdsaw6Vl+yk3FvduWJUZjEh7zBMKRUoSOlo6i8Ap CNSgHk1QQSI2wPqs
gltpxhQ8B3wCdUNbywntZVyaNp5CgmkBxOs330nkl+jQsZvE5XmYyZt20W6S uCaV1YYHHducXdc/
DNUrSdsdw2nNmVOqZ3xC53UXX/tuPquLqLbSs2W1vtbCAsdzTalNbqG64OrG 74I2C191RM05l2jp
AHfoz+9OZ+7q2pSGYdbACxY3Rke2s7jqPD/X9aukO50ZDibLEGW8wdL+0yxZ LGaR2zJ9K8yo4YuO
09oUHORRtY0WoMRX0FFTMYIDMzCCAy8CAQEwgYAweTEQMA4GA1UEChMHUm9v dCBDQTEeMBwGA1UE
CxMVaHR0cDovL3d3dy5jYWNlcnQub3JnMSIwIAYDVQQDExlDQSBDZXJ0IFNp Z25pbmcgQXV0aG9y
aXR5MSEwHwYJKoZIhvcNAQkBFhJzdXBwb3J0QGNhY2VydC5vcmcCAwVx1DAJ BgUrDgMCGgUAoIIB
hzAYBgkqhkiG9w0BCQMxCwYJKoZIhvcNAQcBMBwGCSqGSIb3DQEJBTEPFw0x MDAyMjMwMTE1MjJa
MCMGCSqGSIb3DQEJBDEWBBSiynear1h0TYVTkjC2jvVmBUF5YzCBkQYJKwYB BAGCNxAEMYGDMIGA
MHkxEDAOBgNVBAoTB1Jvb3QgQ0ExHjAcBgNVBAsTFWh0dHA6Ly93d3cuY2Fj ZXJ0Lm9yZzEiMCAG
A1UEAxMZQ0EgQ2VydCBTaWduaW5nIEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJ ARYSc3VwcG9ydEBj
YWNlcnQub3JnAgMFcdQwgZMGCyqGSIb3DQEJEAILMYGDoIGAMHkxEDAOBgNV BAoTB1Jvb3QgQ0Ex
HjAcBgNVBAsTFWh0dHA6Ly93d3cuY2FjZXJ0Lm9yZzEiMCAGA1UEAxMZQ0Eg Q2VydCBTaWduaW5n
IEF1dGhvcml0eTEhMB8GCSqGSIb3DQEJARYSc3VwcG9ydEBjYWNlcnQub3Jn AgMFcdQwDQYJKoZI
hvcNAQEBBQAEggEAkGxREFO78yqnnNRlK6JPnRpRj5QQp511O+Qc5t1HP8Ew g60tr646CWV5LxyM
HDvXS0E4w6D/KXXx0XUqTMYas9X67nTJDq3IXzP+CjjsyCiDlGomkjXwos+d YJpzt0HvvAgvfsUi
Ngy1UWVNOfspNPoJKbSWISsNAa88FW8NFWI8/QnvIw87a1V08MzO6zKxa2F9 UYL0bPuRLo0FMUK2
oRCyLZPwzPf9bFaqlnTtpNdakEzdRkJmqqBxpHSgd5xDaCJywtzfZDgl2kkB 7GuW12qBopcyWe/g
aqTDBvz8KMz3iKQPOMz9y4TJzlPYIizwY731ubkV3Swd0a/FnxfPXQAAAAAA AA==

--Apple-Mail-15-817713501--

RE: How do I pick up correct version of SSL

--_33bee666-9c32-4d08-9e28-4043b90ae1f3_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Thanks for the clarification onthis topic... but any tip how we can cope wi=
th httpd linked with openssl 0.9.8x on redhat?

Apparently there is a requirement of openssl not to overwrite the default v=
ersion provided with the OS.=20

How do we specify to httpd the library to take at runtime?
How can we check which library is taken by httpd at runtime?

Thanks a lot for help=2C

P.

> From: sctemme@apache.org
> Date: Mon=2C 22 Feb 2010 17:15:22 -0800
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] How do I pick up correct version of SSL
>=20
>=20
> On Feb 21=2C 2010=2C at 7:17 PM=2C John Iliffe wrote:
>=20
> > I have just created a new server running Red Hat EL5.4. I decided to
> > update the version of Apache to 2.2.14 at the same time.
> >=20
> > I compiled with "enable-ssl=3D" but the log shows that
> > the openssl in use is the default shipped with the operating system.
> > How do I get Apache to pick up the proper openssl version?
>=20
> Two issues:
>=20
> 1) As Igor points out=2C --with-ssl=3D/foo/bar/openssl steers the Apache =
build system to the OpenSSL installed under /foo/bar. The build system wil=
l pick up the include and lib subdirectories. If your OpenSSL is 0.9.8x=2C=
you may have to set and export LD_LIBRARY_PATH=3D/foo/bar/openssl/lib befo=
re you ./configure to make the test programs pick up the right libraries as=
opposed to the system copies. =20
>=20
> 2) At runtime=2C the httpd binary needs to find the libssl.so and libcryp=
to.so. It seems that on Linux (or in the httpd build system in particular)=
=2C rpath doesn't work so the path to the libraries is not hardcoded in the=
binaries. If you compiled against your own OpenSSL 0.9.8x=2C the runtime =
will pick up the system copy unless you set and export LD_LIBRARY_PATH=3D/f=
oo/bar/openssl/lib on the shell that starts the webserver. A couple of Loa=
dFile directives in your config may also help.=20
>=20
> 3) It gets worse. On Red Hat=2C the C library links against OpenSSL for =
the Kerberos stuff=2C and EVERYTHING (including httpd) links against the C =
library. This means that the system copy of OpenSSL gets loaded when httpd=
starts=2C before it loads mod_ssl.so and resolves the dynamic library bits=
in it. Hence=2C you are likely to end up pulling in the system OpenSSL=2C=
whatever steps from 2) above you might try to make it otherwise. Nor will=
tearing out your hair help. If your own OpenSSL is not 0.9.8x (but 1.0.0z=
or 0.9.7y)=2C this should not be a problem. =20
>=20
> Enjoy,
>=20
> S.
>=20
> > I have a horrible feeling that I have missed something important in the
> > config but I have had no success so far in finding it.
> >=20
> > Thanks in advance.
> >=20
> > John
> >=20
> >=20
> >=20
> >=20
> > ------------------------------------------------------------ ---------
> > The official User-To-User support forum of the Apache HTTP Server Proje=
ct.
> > See for more info.
> > To unsubscribe=2C e-mail: users-unsubscribe@httpd.apache.org
> > " from the digest: users-digest-unsubscribe@httpd.apache.org
> > For additional commands=2C e-mail: users-help@httpd.apache.org
> >=20
> >=20
>=20
>=20
>=20
> --=20
> Sander Temme
> sctemme@apache.org
> PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF
>=20
>=20
>=20
=20
____________________________________________________________ _____
Hotmail: Trusted email with Microsoft=92s powerful SPAM protection.
https://signup.live.com/signup.aspx?id=3D60969=

--_33bee666-9c32-4d08-9e28-4043b90ae1f3_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable






Thanks for the clarification onthis topic... but any tip how we can cope wi=
th httpd linked with openssl 0.9.8x on redhat?

Apparently there is a=
requirement of openssl not to overwrite the default version provided with =
the OS.

How do we specify to httpd the library to take at runtime?<=
br>How can we check which library is taken by httpd at runtime?

Than=
ks a lot for help=2C

P.

>=3B From: sctemme@apache.org
&g=
t=3B Date: Mon=2C 22 Feb 2010 17:15:22 -0800
>=3B To: users@httpd.apac=
he.org
>=3B Subject: Re: [users@httpd] How do I pick up correct versio=
n of SSL
>=3B
>=3B
>=3B On Feb 21=2C 2010=2C at 7:17 PM=2C=
John Iliffe wrote:
>=3B
>=3B >=3B I have just created a new s=
erver running Red Hat EL5.4. I decided to
>=3B >=3B update the vers=
ion of Apache to 2.2.14 at the same time.
>=3B >=3B
>=3B >=
=3B I compiled with "enable-ssl=3D<=3Bpath to openssl>=3B" but the log =
shows that
>=3B >=3B the openssl in use is the default shipped with =
the operating system.
>=3B >=3B How do I get Apache to pick up the p=
roper openssl version?
>=3B
>=3B Two issues:
>=3B
>=
=3B 1) As Igor points out=2C --with-ssl=3D/foo/bar/openssl steers the Apach=
e build system to the OpenSSL installed under /foo/bar. The build system w=
ill pick up the include and lib subdirectories. If your OpenSSL is 0.9.8x=
=2C you may have to set and export LD_LIBRARY_PATH=3D/foo/bar/openssl/lib b=
efore you ./configure to make the test programs pick up the right libraries=
as opposed to the system copies.
>=3B
>=3B 2) At runtime=2C t=
he httpd binary needs to find the libssl.so and libcrypto.so. It seems tha=
t on Linux (or in the httpd build system in particular)=2C rpath doesn't wo=
rk so the path to the libraries is not hardcoded in the binaries. If you c=
ompiled against your own OpenSSL 0.9.8x=2C the runtime will pick up the sys=
tem copy unless you set and export LD_LIBRARY_PATH=3D/foo/bar/openssl/lib o=
n the shell that starts the webserver. A couple of LoadFile directives in =
your config may also help.
>=3B
>=3B 3) It gets worse. On Red =
Hat=2C the C library links against OpenSSL for the Kerberos stuff=2C and EV=
ERYTHING (including httpd) links against the C library. This means that th=
e system copy of OpenSSL gets loaded when httpd starts=2C before it loads m=
od_ssl.so and resolves the dynamic library bits in it. Hence=2C you are li=
kely to end up pulling in the system OpenSSL=2C whatever steps from 2) abov=
e you might try to make it otherwise. Nor will tearing out your hair help.=
If your own OpenSSL is not 0.9.8x (but 1.0.0z or 0.9.7y)=2C this should n=
ot be a problem.
>=3B
>=3B Enjoy=2C
>=3B
>=3B S. r>>=3B
>=3B >=3B I have a horrible feeling that I have missed som=
ething important in the
>=3B >=3B config but I have had no success s=
o far in finding it.
>=3B >=3B
>=3B >=3B Thanks in advance.<=
br>>=3B >=3B
>=3B >=3B John
>=3B >=3B
>=3B >=3B =

>=3B >=3B
>=3B >=3B
>=3B >=3B ---------------------=
------------------------------------------------
>=3B >=3B The offic=
ial User-To-User support forum of the Apache HTTP Server Project.
>=3B=
>=3B See <=3BURL:http://httpd.apache.org/userslist.html>=3B for more=
info.
>=3B >=3B To unsubscribe=2C e-mail: users-unsubscribe@httpd.a=
pache.org
>=3B >=3B " from the digest: users-digest-unsubscribe@=
httpd.apache.org
>=3B >=3B For additional commands=2C e-mail: users-=
help@httpd.apache.org
>=3B >=3B
>=3B >=3B
>=3B
>=
=3B
>=3B
>=3B --
>=3B Sander Temme
>=3B sctemme@apac=
he.org
>=3B PGP FP: 51B4 8727 466A 0BC3 69F4 B7B8 B2BE BC40 1529 24AF=

>=3B
>=3B
>=3B

Re: RE: How do I pick up correct version of SSL

--0050450144a65b763104803fd819
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Run the ldd command against httpd executive binary too see the linked
libraries

On Feb 23, 2010 6:39 PM, "Paul Jacques" wrote:

Thanks for the clarification onthis topic... but any tip how we can cope
with httpd linked with openssl 0.9.8x on redhat?

Apparently there is a requirement of openssl not to overwrite the default
version provided with the OS.

How do we specify to httpd the library to take at runtime?
How can we check which library is taken by httpd at runtime?

Thanks a lot for help,

P.

> From: sctemme@apache.org
> Date: Mon, 22 Feb 2010 17:15:22 -0800
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] How do I pick up correct version of SSL

> > > On Feb 21, 2010, at 7:17 PM, John Iliffe wrote: > > > I have just
created a new server run...
------------------------------
Hotmail: Trusted email with Microsoft=92s powerful SPAM protection. Sign up
now.

--0050450144a65b763104803fd819
Content-Type: text/html; charset=windows-1252
Content-Transfer-Encoding: quoted-printable

Run the ldd command against httpd executive binary too see the linked li=
braries

On Feb 23, 2010 6:39 PM, "Paul Jacques&qu=
ot; <devexplorer@hotmail.com<=
/a>> wrote:

Thanks for the clarification onthis topic... but any tip how we can cope wi=
th httpd linked with openssl 0.9.8x on redhat?

Apparently there is a=
requirement of openssl not to overwrite the default version provided with =
the OS.


How do we specify to httpd the library to take at runtime?
How can w=
e check which library is taken by httpd at runtime?

Thanks a lot for=
help,

P.

> From: rget=3D"_blank">sctemme@apache.org

> Date: Mon, 22 Feb 2010 17:15:22 -0800
> To: ers@httpd.apache.org" target=3D"_blank">users@httpd.apache.org
> =
Subject: Re: [users@httpd] How do I pick up correct version of SSL

color=3D"#500050">
>=20
>=20
> On Feb 21, 2010, at 7:17 PM, John Iliffe wrote:
>=20
> > I have just created a new server run...

#aaaaaa">

---

Hotmail: Trusted email with Microsoft=92s powerful SPAM protec=
tion. _blank">Sign up now.

RE: How do I pick up correct version of SSL

--_60277ea0-6e3f-4695-8aca-1f7b13e23705_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


For static linking but the command does not help for dynamic libraries...

Date: Tue=2C 23 Feb 2010 18:53:27 +1100
From: icicimov@gmail.com
To: users@httpd.apache.org
Subject: Re: RE: [users@httpd] How do I pick up correct version of SSL

Run the ldd command against httpd executive binary too see the linked libra=
ries




On Feb 23=2C 2010 6:39 PM=2C "Paul Jacques" wrote=
:






Thanks for the clarification onthis topic... but any tip how we can cope wi=
th httpd linked with openssl 0.9.8x on redhat?

Apparently there is a requirement of openssl not to overwrite the default v=
ersion provided with the OS.=20


How do we specify to httpd the library to take at runtime?
How can we check which library is taken by httpd at runtime?

Thanks a lot for help=2C

P.

> From: sctemme@apache.org

> Date: Mon=2C 22 Feb 2010 17:15:22 -0800
> To: users@httpd.apache.org
> Subject: Re: [users@httpd] How do I pick up correct version of SSL
>=20
>=20
> On Feb 21=2C 2010=2C at 7:17 PM=2C John Iliffe wrote:
>=20
> > I have just created a new server run...
Hotmail: Trusted email with Microsoft=92s powerful SPAM protection. Sign up=
now.


=20
____________________________________________________________ _____
Hotmail: Trusted email with powerful SPAM protection.
https://signup.live.com/signup.aspx?id=3D60969=

--_60277ea0-6e3f-4695-8aca-1f7b13e23705_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable






For static linking but the command does not help for dynamic libraries... r>

On Feb 23=2C 2010 6:39 PM=2C "Paul Jacques" <=3B =3D"mailto:devexplorer@hotmail.com">devexplorer@hotmail.com>=3B wrote=
:

Thanks for the clarification onthis topic... but any tip how we can cope wi=
th httpd linked with openssl 0.9.8x on redhat?

Apparently there is a=
requirement of openssl not to overwrite the default version provided with =
the OS.


How do we specify to httpd the library to take at runtime?
How can w=
e check which library is taken by httpd at runtime?

Thanks a lot for=
help=2C

P.

>=3B From: ">sctemme@apache.org

>=3B Date: Mon=2C 22 Feb 2010 17:15:22 -0800
>=3B To: lto:users@httpd.apache.org">users@httpd.apache.org
>=3B Subject: R=
e: [users@httpd] How do I pick up correct version of SSL 050">
>
>
>=3B On Feb 21=2C 2010=2C at 7:17 PM=2C John Iliffe wrote:
>
>=3B >=3B I have just created a new server run...
=3D"#aaaaaa">

---

Hotmail: Trusted email with Microsoft=92s powerful SPAM pr=
otection. Sign u=
p now.

RE: How do I pick up correct version of SSL

--=_alternative 0033A052802576D3_=
Content-Type: text/html; charset="us-ascii"



Content-Type:>
Content-Type: --_60277ea0-6e3f-4695-8aca-1f7b13e23705_ html; text
quoted-printable Content-Transfer-Encoding:>

style="BORDER-LEFT: #0000ff 2px solid; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; MARGIN-RIGHT: 0px">

---

From: Paul Jacques <devexplorer@hotmail.com>
[mailto:Paul Jacques <devexplorer@hotmail.com>]
Sent: 23
February 2010 08:49
To: users@httpd.apache.org
Subject:
RE: [users@httpd] How do I pick up correct version of SSL

For static linking but the command does not help for dynamic
libraries...

---

Date: Tue, 23 Feb 2010 18:53:27 +1100
From: icicimov@gmail.com
To:
users@httpd.apache.org
Subject: Re: RE: [users@httpd] How do I pick up
correct version of SSL

Run the ldd command against httpd executive
binary too see the linked libraries

On Feb 23, 2010 6:39 PM, "Paul Jacques" < href="mailto:devexplorer@hotmail.com">devexplorer@hotmail.co m>
wrote:

Thanks for the clarification onthis topic... but any tip how we can
cope with httpd linked with openssl 0.9.8x on redhat?

Apparently
there is a requirement of openssl not to overwrite the default version
provided with the OS.

How do we specify to httpd the library to take
at runtime?
How can we check which library is taken by httpd at
runtime?

Thanks a lot for help,

P.

> From: href="mailto:sctemme@apache.org">sctemme@apache.org
> Date: Mon,
22 Feb 2010 17:15:22 -0800
> To: href="mailto:users@httpd.apache.org">users@httpd.apache.org
>
Subject: Re: [users@httpd] How do I pick up correct version of SSL color=#500050> > > > On Feb 21, 2010, at 7:17 PM, John Iliffe
wrote: > > > I have just created a new server
run...

---

Hotmail: Trusted email with Microsoft’s powerful SPAM protection. href="https://signup.live.com/signup.aspx?id=60969">Sign up
now.

---

Hotmail: Trusted email with powerful SPAM protection. href="https://signup.live.com/signup.aspx?id=60969" target=_new>Sign up
now.
____________________________________________________________ __________
This
email has been scanned by the MessageLabs Email Security System.
For more
information please visit http://www.messagelabs.com/email

____________________________________________________________ __________

RE: How do I pick up correct version of SSL

--_d7c3431b-06fc-4b37-8a80-5c80d00dd0db_
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable


Sorry for the confusion Igor and thanks to both of u.

Using configure=2C I set the path to openssl 0.9.8k that I built in a separ=
ate directory before rebuild of apaci
../configure --prefix=3D/usr/local/apache2 --enable-modules=3Dmost --enable-=
mods-shared=3Dall --disable-authz-default --disable-dav --enable-proxy --en=
able-ssl --with-ssl=3D${BUILDIR}/../openssl-0.9.8k --with-mpm=3Dworker --en=
able-so --enable-rewrite --enable-log-config --with-included-apr

However=2C checking the maps file=2C it uses /lib/libssl.so.0.9.6b.=20

In the other hand=2C it seems that shared lib of of 0.9.8k is not generated=
as part of openssl built. Moreover=2C due to redhat limitation the version=
installed by the OS can not be overwritten.

Do I have to set an option to set another path for installation of openssl =
not to overwrite the OS version?
How can I get the .so file as output of the openssl build?

Once done=2C I suppose that I should add the path of the newly build openss=
l so file in LD_LIBRARY_PATH

Now=2C I understand the "Enjoy" of Sander... =3B-)

To: users@httpd.apache.org
Date: Tue=2C 23 Feb 2010 09:23:54 +0000
From: daniel.goulder@and.co.uk
Subject: RE: [users@httpd] How do I pick up correct version of SSL









Hi Paul
=20
Sorry it's the other way round. The ldd command tells you which=20
libraries that the linker will call at runtime when the binary is=20
executed.
=20
Igor was correct
=20
If you want to specify the library you need to set LD_LIBRARY_PATH to=20
include the library you are after before execution
=20
To check what libraries will be linked=2C use ldd as Igor has=20
specified.
=20
To check what libraries have been linked by a running PID=2C take a=20
look at /proc//maps
=20
Danny


=20
=20
From: Paul Jacques =20
[mailto:Paul Jacques ]=20
Sent: 23=20
February 2010 08:49
To: users@httpd.apache.org
Subject:=20
RE: [users@httpd] How do I pick up correct version of SSL


=20
=20
For static linking but the command does not help for dynamic=20
libraries...


=20
Date: Tue=2C 23 Feb 2010 18:53:27 +1100
From: icicimov@gmail.com
To:=20
users@httpd.apache.org
Subject: Re: RE: [users@httpd] How do I pick up=20
correct version of SSL

Run the ldd command against httpd executive=20
binary too see the linked libraries



On Feb 23=2C 2010 6:39 PM=2C "Paul Jacques" =20
wrote:


Thanks for the clarification onthis topic... but any tip how we can=20
cope with httpd linked with openssl 0.9.8x on redhat?

Apparently=20
there is a requirement of openssl not to overwrite the default version=
=20
provided with the OS.=20

How do we specify to httpd the library to take=20
at runtime?
How can we check which library is taken by httpd at=20
runtime?

Thanks a lot for help=2C

P.

> From: sctemme@apache.org
> Date: Mon,
22 Feb 2010 17:15:22 -0800
> To: users@httpd.apache.org
>=20
Subject: Re: [users@httpd] How do I pick up correct version of SSL > > =
> On Feb 21=2C 2010=2C at 7:17 PM=2C John Iliffe=20
wrote: > > > I have just created a new server=20
run...

=20
Hotmail: Trusted email with Microsoft=92s powerful SPAM protection. Sig=
n up=20
now.


=20
Hotmail: Trusted email with powerful SPAM protection. Sign up=20
now.
____________________________________________________________ __________
This=20
email has been scanned by the MessageLabs Email Security System.
For more=20
information please visit http://www.messagelabs.com/email=20
=20
____________________________________________________________ __________


____________________________________________________________ __________

This e-mail and any attached files are intended for the named addressee onl=
y. It contains information=2C which may be confidential and legally privile=
ged and also protected by copyright. Unless you are the named addressee (or=
authorised to receive for the addressee) you may not copy or use it=2C or =
disclose it to anyone else. If you received it in error please notify the s=
ender immediately and then delete it from your system. Please be advised th=
at the views and opinions expressed in this e-mail may not reflect the view=
s and opinions of Associated Newspapers Limited or any of its subsidiary co=
mpanies. We make every effort to keep our network free from viruses. Howeve=
r=2C you do need to check this e-mail and any attachments to it for viruses=
as we can take no responsibility for any computer virus which may be trans=
ferred by way of this e-mail. Use of this or any other e-mail facility sign=
ifies consent to any interception we might lawfully carry out to prevent ab=
use of these faciliti
es.

Associated Newspapers Ltd. Registered Office: Northcliffe House=2C 2 Derry =
St=2C Kensington=2C London=2C W8 5TT. Registered No 84121 England.
=20
____________________________________________________________ _____
Hotmail: Powerful Free email with security by Microsoft.
https://signup.live.com/signup.aspx?id=3D60969=

--_d7c3431b-06fc-4b37-8a80-5c80d00dd0db_
Content-Type: text/html; charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable






Sorry for the confusion Igor and thanks to both of u.

Using configur=
e=2C I set the path to openssl 0.9.8k that I built in a separate directory =
before rebuild of apaci
./configure --prefix=3D/usr/local/apache2 --enab=
le-modules=3Dmost --enable-mods-shared=3Dall --disable-authz-default --disa=
ble-dav --enable-proxy --enable-ssl --with-ssl=3D${BUILDIR}/../openssl-0.9.=
8k --with-mpm=3Dworker --enable-so --enable-rewrite --enable-log-config --w=
ith-included-apr

However=2C checking the maps file=2C it uses /lib/l=
ibssl.so.0.9.6b.

In the other hand=2C it seems that shared lib of o=
f 0.9.8k is not generated as part of openssl built. Moreover=2C due to redh=
at limitation the version installed by the OS can not be overwritten.
r>Do I have to set an option to set another path for installation of openss=
l not to overwrite the OS version?
How can I get the .so file as output =
of the openssl build?

Once done=2C I suppose that I should add the p=
ath of the newly build openssl so file in LD_LIBRARY_PATH

Now=2C I u=
nderstand the "Enjoy" of Sander... =3B-)

eft: 5px=3B margin-left: 5px=3B margin-right: 0px=3B">

"en-us">

---

From: Paul Jacques <=3Bdevexplorer@hotmail=
..com>
[mailto:Paul Jacques <=3Bdevexplorer@hotmail.com>=3B]
Sent: > 23=20
February 2010 08:49
To: users@httpd.apache.org
Subject: b>=20
RE: [users@httpd] How do I pick up correct version of SSL

<=
/div>

For static linking but the command does not help for dynamic=20
libraries...

---

Date: Tue=2C 23 Feb 2010 18:53:27 +1100
From: icicimov@gmail.com
To=
:=20
users@httpd.apache.org
Subject: Re: RE: [users@httpd] How do I pick up=
=20
correct version of SSL

Run the ldd command against httpd executive=
=20
binary too see the linked libraries

On Feb 23=2C 2010 6:39 PM=2C "Paul Jacques" <=3Bdevexplo=
rer@hotmail.com>
wrote:

Thanks for the clarification onthis topic... but any tip how we ca=
n=20
cope with httpd linked with openssl 0.9.8x on redhat?

Apparently=
=20
there is a requirement of openssl not to overwrite the default version=
=20
provided with the OS.

How do we specify to httpd the library to=
take=20
at runtime?
How can we check which library is taken by httpd at=20
runtime?

Thanks a lot for help=2C

P.

>=3B From: =
sctemme@apache.org
>=3B Date: Mon,
22 Feb 2010 17:15:22 -0800
>=3B To: users@httpd.apache.org<=
br>>
Subject: Re: [users@httpd] How do I pick up correct version of SSL color=3D"#500050"> >=3B >=3B >=3B On Feb 21=2C 2010=2C at 7:17 PM=2C=
John Iliffe=20
wrote: >=3B >=3B >=3B I have just created a new server=20
run...

---

Hotmail: Trusted email with Microsoft=92s powerful SPAM protection. =
Sign up=20
now.

---

Hotmail: Trusted email with powerful SPAM protection. Sign up=20
now.
____________________________________________________________ _=
_________
This=20
email has been scanned by the MessageLabs Email Security System.
For m=
ore=20
information please visit http://www.messagelabs.com/email=20

____________________________________________________________ _________=
_