httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "French, Warron S CTR DISA NS" <Warron.French....@disa.mil>
Subject [users@httpd] Compiling apache with 3rd party module for mod_ssl with openssl (UNCLASSIFIED)
Date Tue, 18 Nov 2008 21:52:32 GMT
Classification:  UNCLASSIFIED 
Caveats: NONE

I posted this information on Friday of last week.  Any takers as to why I
can't compile apache's httpd binary with mod_ssl?

I get a libssl.so created (as opposed to a mod_ssl.so) but it is not
compiled into httpd (using httpd -l to confirm) as libssl.c or mod_ssl.c.


----------------------------------------------------------------------------
--------



I have been trying for the past 3 weeks to get following compiled all
together:

I used the following software source tarballs
Apache_1.3.41
Mod_ssl-2.8.31_1.3.41
Openssl-0.9.8i
Libmcrypt-2.5.8
MySQL-5.0.67
PHP-5.2.6

At first I figured I would use a Solaris 10 SPARC system and move the
binaries to a Solaris 9 system, but ended up with several different library
issues.


So now I am on a Solaris 9 SPARC system with the following added packages
(after discovering _BY ACCIDENT_ they were REQUIRED without documentation):

SMCgcc  (v3.4.6)  [from sunfreeware.com]
SMCmake (v3.81)   [from sunfreeware.com]
SMCm4   (v1.4.10) [from sunfreeware.com]
flex (v2.5.35)

All are in the path /usr/local/bin (except flex, it is in
/usr/local/flex/bin).


I extracted all of the above source tarballs (independently) into=
/devdisk1/01Build-tree


I did the following Configure/make/make install procedures in this order:


cd /devdisk1/01Build-tree/openssl-0.9.8i
./Configure solaris_sparcv9_gcc shared threads --openssldir=/usr/local/ssl
make
make install

cd ../mod_ssl-2.8.31-1.3.41
./configure --prefix=/usr/local/AMSapache --with-apache=../apache_1.3.41
--with-ssl=../openssl-0.9.8i --enable-shared=ssl --disable-rule=SSL_COMPAT
--enable-rule=SSL_SDBM --enable-rule=EAPI

cd ../apache_1.3.41
./configure --prefix=/usr/local/AMSapache --server-uid=60003
--server-gid=60003 --enable-suexec --suexec-caller=apache
--suexec-uidmin=1000 --suexec-gidmin=1000 --suexec-safepath=/bin:/usr/bin
--enable-module=so --enable-module=rewrite --enable-shared=rewrite
--enable-module=proxy --enable-shared=proxy --enable-module=auth_digest
--enable-shared=auth_digest --enable-module=ssl --enable-shared=ssl
--enable-rule=SHARED_CORE
make
make install



<----
For the time being I skip the PHP and MySQL build process
---->


I create a self-signed server certificate (with no problems) using openssl
and some command line arguments.

Then I attempt to start apache using apachectl:



BEFORE applying the --enable-rule=EAPI  (in Configure for mod_ssl) and
--enable-rule=SHARED_CORE (in Configure for Apache) the response was:

Cannot load /usr/local/AMSapache/libexec/libssl.so into server: ld.so.1:
httpd: fatal: relocation error: 
file /usr/local/AMSapache/libexec/libssl.so: symbol SSL_CTX_sess_set_new_cb:
referenced symbol not found
./apachectl startssl: httpd could not be started





AFTER APPLYING the --enable-rule=EAPI (to Configure mod_ssl) and
--enable-rule=SHARED_CORE (to Configure Apache) I get a slightly different
response:

Cannot load /usr/local/AMSapache/libexec/libssl.so into server: ld.so.1:
libhttpd.ep: fatal: relocation error: 
file /usr/local/AMSapache/libexec/libssl.so: symbol SSL_CTX_sess_set_new_cb:
referenced symbol not found
./apachectl startssl: httpd could not be started



Can someone tell me explicitly what I need to do and WHERE (is just as
important).  This is not for personal use, it is for my work.


If you need to know the version of something specific, ASK I will tell you.





Warron French, SCSA
Classification:  UNCLASSIFIED 
Caveats: NONE


Mime
View raw message