httpd-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Balaji Katika <balaji.kat...@gmail.com>
Subject Re: [users@httpd] How to apply Open SSL openssl-1.0.1h to Apache 2.2.22
Date Mon, 16 Jun 2014 12:53:19 GMT
HI Pooja,

Looks like you are trying to apply the patch for June 5 OpenSSL
vulnerabilities for you httpd server mentioned at https://www.openssl.org/
But I think the mod_ssl shipped default by apache httpd uses the
OpenSSL/0.9.8t. And hence, we might need to apply the relevant 0.9.8za
available through the website...
I suspect this could be the error in your case as you are attempting for
OpenSSL 1.0.1h. Please rectify me if my analysis is not correct.

Further, I think the fix is about replacing the mod_ssl.so file located in
the modules folder with the fixed new version of the .so file that is
linked with OpenSSL 0.9.8za. I have googled and figured out that mod_ssl
didn't release the new patch for this. Mostly likely, it looks like we need
to rebuild mod_ssl ourselves (Just like apache httpd does !!) as mod_ssl
has not released the .so file in the recent time (http://www.modssl.org/)


Regards
Balaji Katika


On Mon, Jun 16, 2014 at 6:07 PM, Pooja Kulkarni <P.Kulkarni@fbnbank.co.uk>
wrote:

>
> Hi,
>
>
>
> We have Apache 2.2.22 (Win32) on a Windows 2008 64 bit server. It
> currently has OpenSSL 0.9.8.
>
> We are trying to apply the OpenSSL 1.0.1h on the same, after applying the
> open SSL and copying the relevant files to the bin directory of apache
> server, we are not able to start the server. It gives an mod_sso error.
>
>
>
> Can you please advice how can we achieve the same?
>
>
>
>
>
> Regards,
>
> Pooja
>
> +44 20 78264655
>
>
>
>
> *Winner of the Global Trade Review award - Best Trade Finance Bank in West
> Africa 2009, 2010, 2011, 2012 & 2013 & Best Local Trade Finance Bank in
> West Africa 2013*
> ------------------------------
> Internet communications are not secure and therefore FBN Bank (UK) Ltd
> does not accept legal responsibility for the contents of the message.
> Whilst FBN Bank (UK) Ltd operates anti virus software, it does not accept
> responsibility for any damage that is caused by viruses being passed.
> This message and any attachments are strictly confidential to the normal
> user of the e-mail address to which it was addressed and may also be
> privileged. If you are not the addressee, you may not forward, copy,
> disclose or use any part of the message or attachments. If you have
> received this message in error, please immediately notify the sender by
> return e-mail and permanently delete it from your system. Any opinions
> contained in this message are those of the author and are not provided or
> endorsed by FBN Bank (UK) Ltd unless clearly indicated and the authority of
> the author to so bind FBN Bank (UK) Ltd is duly verified.
>
> FBN Bank (UK) Limited is registered in England and Wales under company
> number 4459383 with its registered address at 28 Finsbury Circus, London
> EC2M 7DT.
>
> FBN Bank (UK) Ltd is authorised by the Prudential Regulation Authority and
> regulated by the Financial Conduct Authority and the Prudential Regulation
> Authority.
>
> ------------------------------
>

Mime
View raw message