Return-Path: Delivered-To: apmail-httpd-users-archive@httpd.apache.org Received: (qmail 98327 invoked by uid 500); 10 Feb 2003 16:32:34 -0000 Mailing-List: contact users-help@httpd.apache.org; run by ezmlm Precedence: bulk Reply-To: users@httpd.apache.org list-help: list-unsubscribe: list-post: Delivered-To: mailing list users@httpd.apache.org Received: (qmail 98279 invoked from network); 10 Feb 2003 16:32:34 -0000 Received: from orangexl.cust.2ndreality.nl (HELO mail.orangexl.nl) (213.239.135.95) by daedalus.apache.org with SMTP; 10 Feb 2003 16:32:34 -0000 Received: (qmail 98955 invoked by uid 89); 10 Feb 2003 16:31:50 -0000 Received: from cp262152-a.roose1.nb.home.nl (HELO FamHolthaus) (217.122.6.250) by orangexl.cust.2ndreality.nl with SMTP; 10 Feb 2003 16:31:50 -0000 Message-ID: <000d01c2d125$15386dd0$0200a8c0@FamHolthaus> From: "Sander Holthaus - Orange XL" To: References: <001d01c2d122$0f25e470$0200a8c0@FamHolthaus> Date: Mon, 10 Feb 2003 17:54:31 +0100 Organization: Orange XL MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N Subject: Re: [users@httpd] FW: Compiling mod_ssl as a DSO Sorry, typo in my reply. It should state why not to use OpenSSL 0.9.6b (i forgot the version bit)! There is absolutely nothing wrong with OpenSSL, just with some old versions. Kind Regards, Sander Holthaus ----- Original Message ----- From: "Sander Holthaus - Orange XL" To: Sent: Monday, February 10, 2003 5:32 PM Subject: Re: [users@httpd] FW: Compiling mod_ssl as a DSO > The latest version is 0.9.7, but I don't know if it will work with Apache > 1.3.12 and your operatingsystem. It should. > > More info on why not to use OpenSSL can be found at > http://www.securiteam.com/unixfocus/5PP0B2A8AA.html and > http://httpd.apache.org > > Kind Regards, > Sander Holthaus > > ----- Original Message ----- > From: "Simon Donally" > To: > Sent: Monday, February 10, 2003 3:52 PM > Subject: RE: [users@httpd] FW: Compiling mod_ssl as a DSO > > > Hi > > Thanks for the reply, please could you recommend a more appropriate version > of OpenSSL to use with Apache 1.3.12? > > Simon Donally > > -----Original Message----- > From: Sander Holthaus - Orange XL [mailto:info@orangexl.com] > Sent: Monday, February 10, 2003 4:24 PM > To: users@httpd.apache.org > Subject: Re: [users@httpd] FW: Compiling mod_ssl as a DSO > > You should not use openssl 0.9.6b. > > Kind Regards, > Sander Holthaus > > ----- Original Message ----- > From: "Simon Donally" > To: > Sent: Monday, February 10, 2003 1:11 PM > Subject: [users@httpd] FW: Compiling mod_ssl as a DSO > > > Hi List Users > > I am trying to configure Apache to run with ModSSL as a DSO. I am using > relatively old versions of software as this particular version of Apache > functions on the system. The software versions are as follows > > Apache 1.3.12 > Openssl_0.9.6b > Modssl_2.6.6 > > I have read numerous articles both from the list forum and from articles > found from internet searches. I have tried many options to configure Apache > to run with SSL as a DSO over a period of a week and to date have not been > successful. > > I have listed the errors I obtain and the steps I follow to compile Apache. > I would be most grateful for any advice which may lead to the resolution of > this problem. > > 1) Compile OpenSSL 0.9.6b as a shared object as follows > a. make clean > b. make test > c. make build-shared > > 2) ./configure \ > --enable-module=so > --with-apache=/home/sxxx/apache_1.3.12 \ > --with-ssl=/home/simon/Openssl-0.9.6b/openssl-0.9.6b \ > --prefix=/home/simon/Apache12SO \ > --enable-module=ssl > > 3) cd /home/sxxx/apache_1.3.12 > > make > make certificate > make install > > 4) The entry in the httpd.conf file is as follows > > LoadModule ssl_module libexec/libssl.so > > > * This is the first error I obtain > > hometop1% apachectl startssl > Syntax error on line 208 of /home/simon/Apache12SO/conf/httpd.conf: > Cannot load /home/simon/Apache12SO/libexec/libssl.so into server: ld.so.1: > /home/simon/Apache12SO/bin/httpd: fatal: libssl.so.0.9.6: open failed: No > such file or directory > .//apachectl startssl: httpd could not be started > > This is resolved by setting the LD_LIBRARY_PATH variable to > /usr/local/ssl/lib > bash-2.02$ export LD_LIBRARY_PATH:/usr/local/ssl/lib:$LD_LIBRARY_PATH > > > * This is the next error I obtain after having set the LD_LIBRARY_PATH > variable to > bash-2.02$ apachectl startssl > > Syntax error on line 208 of /home/simon/Apache12SO/conf/httpd.conf: > Cannot load /home/simon/Apache12SO/libexec/libssl.so into server: ld.so.1 > : /home/simon/Apache12SO/bin/httpd: fatal: relocation error: file > /home/simon/Apache12SO/libexec/libssl.so: symbol ap_user_id: referenced > symbol not found > .//apachectl startssl: httpd could not be started > > > The next step I tried was > * To directly copy libssl.so from Openssl to libexec using libssl.so from > Openssl > * To set the library path to point to /home/simon/Apache12SO/libexec only > > bash-2.02$ pwd > /reserv/home/simon/Apache12SO/libexec > bash-2.02$ ls -lisa > total 2472 > 118879 2 drwxr-xr-x 2 simon htgroup 512 Feb 10 09:03 . > 420694 2 drwxrwxr-x 12 simon htgroup 512 Feb 6 16:43 .. > 118881 16 -rw-r--r-- 1 simon htgroup 8153 Feb 7 10:57 > httpd.exp > 118893 2 lrwxrwxrwx 1 simon htgroup 11 Feb 10 09:03 > libssl.so -> libssl.so.0 > 118888 2 lrwxrwxrwx 1 simon htgroup 15 Feb 10 09:03 > libssl.so.0 -> libssl.so.0.9.6 > 118886 1920 -rwxrwxr-x 1 simon htgroup 970983 Feb 7 12:45 > libssl.so.0.9.6 > 118890 528 -rwxr-xr-x 1 simon htgroup 256259 Feb 7 10:57 > libssl.so.old > > This didn't work either and generated the following error, I notice that the > file libssl.so.old generated when Apache was compiled is considerably > smaller than the file libssl.so.0.9.6 copied from OpenSSL > > Syntax error on line 208 of /home/simon/Apache12SO/conf/httpd.conf: > Can't locate API module structure `ssl_module' in file > /home/simon/Apache12SO/libexec/libssl.so: ld.so.1: > /home/simon/Apache12SO/bin/httpd: fatal: ssl_module: can't find symbol > .//apachectl startssl: httpd could not be started > > regards > > Simon Donally > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > " from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > " from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > " from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See for more info. > To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org > " from the digest: users-digest-unsubscribe@httpd.apache.org > For additional commands, e-mail: users-help@httpd.apache.org > > --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See for more info. To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org " from the digest: users-digest-unsubscribe@httpd.apache.org For additional commands, e-mail: users-help@httpd.apache.org