Re: Compile Apache HTTP with customized OpenSSL version [SOLVED]

[Oscar A Figueroa <pesuke@xxxxxxxxx>]

Thanks Ian!

I solved exporting some environment variables before the ./configure:

CPPFLAGS="-I/usr/local/openssl-0.9.8r/include"

LDFLAGS="-I/usr/local/openssl-0.9.8r/lib -R/usr/local/openssl-0.9.8r/lib -L/usr/local/openssl-0.9.8r/lib"

LD_LIBRARY_PATH=/usr/local/openssl-0.9.8r/lib:$LD_LIBRARY_PATH
export  LD_LIBRARY_PATH LDFLAGS CPPFLAGS

./configure --prefix=/usr/local/apache2 ...
make && make install

Then the result of 'ldd /usr/local/apache2/modules/mod_ssl.so' is:

        linux-vdso.so.1 =>  (0x00007fff772ab000)
        libssl.so.0.9.8 => /usr/local/openssl-0.9.8r/lib/libssl.so.0.9.8 (0x00007fc2231d3000)
        libcrypto.so.0.9.8 => /usr/local/openssl-0.9.8r/lib/libcrypto.so.0.9.8 (0x00007fc222e42000)
        libdl.so.2 => /lib/libdl.so.2 (0x00007fc222c38000)
        libz.so.1 => /usr/lib/libz.so.1 (0x00007fc222a21000)
        libpthread.so.0 => /lib/libpthread.so.0 (0x00007fc222805000)
        libc.so.6 => /lib/libc.so.6 (0x00007fc2224b1000)
        /lib/ld-linux.so.2 (0x00007fc223656000)

And the result of 'ldconfig -p | grep ssl' is:

        libssl.so.0.9.8 (libc6,x86-64) => /usr/lib/libssl.so.0.9.8
        libssl.so (libc6,x86-64) => /usr/lib/libssl.so
        libgnutls-openssl.so.26 (libc6,x86-64) => /usr/lib/libgnutls-openssl.so.26


Error log of the Apache when has been started:

[notice] suEXEC mechanism enabled (wrapper: /usr/local/apache2/sbin/suexec)

[notice] Digest: generating secret for digest authentication ...

[notice] Digest: done

[notice] Apache/2.2.20 (Unix) mod_ssl/2.2.20 OpenSSL/0.9.8r mod_fcgid/2.3.6 configured -- resuming normal operations

There is an application in Debian distribution which can change the RPATH of an ELF binary named 'chrpath', but i don't know if could set if didn't do at configure time.

Thanks for your attention :)

2011/9/15 Ian Zimmerman <itz@xxxxxxxx>

Oscar> As is visible, the libssl linked is not the
Oscar> /usr/local/openssl-0.9.8r that was compiled manually.

Oscar> After compile openssl, i cant add the path to the /etc/ld.so.conf
Oscar> an make 'ldconfig' because this makes that ssh service fails per
Oscar> the use of the compiled libcrypto.so

Methinks you need -rpath linker option.  No idea how to force the build
to use it, though.

--
Ian Zimmerman
gpg public key: 1024D/C6FF61AD
fingerprint: 66DC D68F 5C1B 4D71 2EE5  BD03 8A00 786C C6FF 61AD
Rule 420: All persons more than eight miles high to leave the court.

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx