httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Jeff Trawick <traw...@gmail.com>
Subject Re: [users@httpd] Compile apache 2.2.26 with openssl1.0.1e failing
Date Sat, 30 Nov 2013 15:29:20 GMT
On Sat, Nov 30, 2013 at 4:20 AM, Igor Cicimov <icicimov@gmail.com> wrote:

> Hi all,
>
> Im trying to build apache2.2.26 on CentOS5.10 final x86_64, linked to
> openssl1.0.1e which is also compiled and installed from source under
> /usr/loca/lib64:
>
> $ ls -l /usr/local/lib64/
> total 7060
> drwxr-xr-x 2 root root    4096 Nov 30 18:50 engines
> -rw-r--r-- 1 root root 3858348 Nov 30 18:50 libcrypto.a
> lrwxrwxrwx 1 root root      18 Nov 30 18:50 libcrypto.so ->
> libcrypto.so.1.0.0
> -r-xr-xr-x 1 root root 2145661 Nov 30 18:50 libcrypto.so.1.0.0
> -rw-r--r-- 1 root root  729426 Nov 30 18:50 libssl.a
> lrwxrwxrwx 1 root root      15 Nov 30 18:50 libssl.so -> libssl.so.1.0.0
> -r-xr-xr-x 1 root root  463549 Nov 30 18:50 libssl.so.1.0.0
> drwxr-xr-x 2 root root    4096 Nov 30 01:21 pkgconfig
>
> I've used the following process to compile openssl1.0.1e:
>
> $ ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl
> enable-tlsext linux-x86_64 threads zlib enable-idea enable-rc5 enable-mdc2
> enable-ec shared
> $ make depend
> $ make
> $ sudo make install
>
> $ openssl version
> OpenSSL 1.0.1e 11 Feb 2013
>
> $ openssl s_client -connect smtp.gmail.com:25 -starttls smtp | grep
> Protocol
> depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
> verify error:num=20:unable to get local issuer certificate
> verify return:0
> 250 CHUNKING
>     Protocol  : TLSv1.2
>
> $ openssl s_client -connect gmail.com:443 | grep Protocol
> depth=2 C = US, O = GeoTrust Inc., CN = GeoTrust Global CA
> verify error:num=20:unable to get local issuer certificate
> verify return:0
>     Protocol  : TLSv1.2
>
> So as expected the client gets to use the TLSv1.2 protocol. I guess that
> means (maybe) openssl is good to go ...
>
> The relevant part of my apache configure command:
>
> $ ./configure LDFLAGS="-L/usr/local/lib64" --enable-ssl=shared
> --with-ssl=/usr/local/lib64 .....
>
> with double attempt to point apache to the openssl libraries, but make is
> failing with following error:
>
> /home/igor.cicimov/httpd-2.2.26/srclib/apr/libtool --silent --mode=link
> gcc -g -O2 -pthread     -L/usr/lib64 -L/usr/local/lib64/lib
> -L/usr/kerberos/lib64  -L/usr/local/lib64 -o ab  ab.lo   -lm
> /home/igor.cicimov/httpd-2.2.26/srclib/pcre/libpcre.la/home/igor.cicimov/httpd-2.2.26/srclib/apr-util/
> libaprutil-1.la /home/igor.cicimov/httpd-2.2.26/srclib/apr-util/xml/expat/
> libexpat.la /home/igor.cicimov/httpd-2.2.26/srclib/apr/libapr-1.la -luuid
> -lrt -lcrypt -lpthread -ldl -lssl -lcrypto -ldl -lz
> .libs/ab.o: In function `main':
> /home/igor.cicimov/httpd-2.2.26/support/ab.c:2241: undefined reference to
> `TLSv1_2_client_method'
> /home/igor.cicimov/httpd-2.2.26/support/ab.c:2239: undefined reference to
> `TLSv1_1_client_method'
> collect2: ld returned 1 exit status
> make[2]: *** [ab] Error 1
> make[2]: Leaving directory `/home/igor.cicimov/httpd-2.2.26/support'
> make[1]: *** [all-recursive] Error 1
> make[1]: Leaving directory `/home/igor.cicimov/httpd-2.2.26/support'
> make: *** [all-recursive] Error 1
>
> This is not my first time I compile apache and openssl and have never seen
> this error about apache tools. What am I missing here? Any thoughts?
>

I guess it is because of the order of the system library and your local
library dir in the linker search path:

libtool --mode=link ... -L/usr/lib64 -L/usr/local/lib64/lib ...


>
> Thanks,
> Igor
>
>
>
>


-- 
Born in Roswell... married an alien...
http://emptyhammock.com/

Mime
View raw message