Return-Path: 
 <users-return-105825-apmail-httpd-users-archive=httpd.apache.org@httpd.apache.org>
X-Original-To: apmail-httpd-users-archive@www.apache.org
Delivered-To: apmail-httpd-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id CC1FEE3FC
	for <apmail-httpd-users-archive@www.apache.org>;
 Tue, 29 Jan 2013 00:01:08 +0000 (UTC)
Received: (qmail 27876 invoked by uid 500); 29 Jan 2013 00:01:05 -0000
Delivered-To: apmail-httpd-users-archive@httpd.apache.org
Received: (qmail 27774 invoked by uid 500); 29 Jan 2013 00:01:05 -0000
Mailing-List: contact users-help@httpd.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@httpd.apache.org
list-help: <mailto:users-help@httpd.apache.org>
list-unsubscribe: <mailto:users-unsubscribe@httpd.apache.org>
List-Post: <mailto:users@httpd.apache.org>
List-Id: <users.httpd.apache.org>
Delivered-To: mailing list users@httpd.apache.org
Received: (qmail 27761 invoked by uid 99); 29 Jan 2013 00:01:05 -0000
Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 29 Jan 2013 00:01:05 +0000
X-ASF-Spam-Status: No, hits=1.5 required=5.0
	tests=HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS
X-Spam-Check-By: apache.org
Received-SPF: pass (nike.apache.org: domain of joe.hansen.at@gmail.com
 designates 209.85.214.177 as permitted sender)
Received: from [209.85.214.177] (HELO mail-ob0-f177.google.com)
 (209.85.214.177)
    by apache.org (qpsmtpd/0.29) with ESMTP; Tue, 29 Jan 2013 00:00:58 +0000
Received: by mail-ob0-f177.google.com with SMTP id wc18so2054028obb.22
        for <users@httpd.apache.org>; Mon, 28 Jan 2013 16:00:37 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:x-received:date:message-id:subject:from:to
         :content-type;
        bh=JTeL9W174AuFw5qDezfH3Sz6sEVA8lZIimcjQBaDpLk=;
        b=LeSyYd79/pw7tsuzBUamZazrmnRlHSLeV9WPHK2gGodAl27tb28FuZVxfDDixQ+aLu
         k00AyRQvdlQE5KV0A4DqxnhAK/brq74bu5XIJ11LeZBh23ayt1ZbinXDlDwGo8qNIu21
         9Yj3ZjWTdSs9o6Hm+UyUTVf8H2WhjxqShjEboHZRAQvpifFNjpZ9VLBkzUJbZA05i7k9
         IHtW+37s+AVOCANgDd+V8wMrVYlfPILRMn/NFw8JOOWb82ED+VRwwkUJxjd/akDzTFbh
         MoY6p/o0OHLBKdKD1ANZWuG6njmX5qqTvSDSIMnLcQ9Y0/DermZckVUSrNBewcn2l1Bj
         1TrA==
MIME-Version: 1.0
X-Received: by 10.182.43.99 with SMTP id v3mr12260895obl.48.1359417637656;
 Mon, 28 Jan 2013 16:00:37 -0800 (PST)
Received: by 10.76.153.2 with HTTP; Mon, 28 Jan 2013 16:00:37 -0800 (PST)
Date: Mon, 28 Jan 2013 17:00:37 -0700
Message-ID: 
 <CAJPQeNWWWpV5WXUDBChnb8BsdY=V7dmK2uSeRpYN2FLfpm5MbQ@mail.gmail.com>
From: Joe Hansen <joe.hansen.at@gmail.com>
To: users@httpd.apache.org
Content-Type: multipart/alternative; boundary=f46d0447961964da7804d4621525
X-Virus-Checked: Checked by ClamAV on apache.org
Subject: [users@httpd] How to build Apache with latest version of OpenSSL

--f46d0447961964da7804d4621525
Content-Type: text/plain; charset=ISO-8859-1

 built and installed OpenSSL 1.0.1c on a RedHat linux box.

$ openssl version
OpenSSL 1.0.1c 10 May 2012

I then compiled and installed Apache HTTP Server (version 2.2.23 with
mod_ssl).

$ lwp-request -m HEAD myexample.com
200 OK
Connection: close
Date: Thu, 17 Jan 2013 20:29:44 GMT
Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_jk/1.2.37

As you can see from above output, Apache isn't using the latest version of
OpenSSL install on this machine. Why? How do I fix that?

The reason I need this is that for our server to be PCI compliant, it
should be using the latest version of OpenSSL.

Thanks for your help!

--f46d0447961964da7804d4621525
Content-Type: text/html; charset=ISO-8859-1

<div dir="ltr"> built and installed OpenSSL 1.0.1c on a RedHat linux box. 

<pre><code>$ openssl version
OpenSSL 1.0.1c 10 May 2012
</code></pre>

<p>I then compiled and installed Apache HTTP Server (version 2.2.23 with mod_ssl).</p>

<pre><code>$ lwp-request -m HEAD <a href="http://myexample.com">myexample.com</a>
200 OK
Connection: close
Date: Thu, 17 Jan 2013 20:29:44 GMT
Server: Apache/2.2.23 (Unix) mod_ssl/2.2.23 OpenSSL/1.0.0-fips mod_jk/1.2.37
</code></pre>

<p>As you can see from above output, Apache isn&#39;t using the latest 
version of OpenSSL install on this machine. Why? How do I fix that?</p>

<p>The reason I need this is that for our server to be PCI compliant, it should be using the latest version of OpenSSL.</p>

<p>Thanks for your help!</p></div>

--f46d0447961964da7804d4621525--