Re: "OpenSSL version is too old" while compiling http 2.4.16 on MacOS 10.11

[arnaud icard <arnaud.icard@xxxxxxxxx>]

I’ve found a way :

Copy the folder /usr/incude/openssl from a Yosemite (MacOS 10.10) to /usr/local/include/openssl on my computer (El Capitan MacOS 10.11).

Then compile apache by adding a flag to the compilation environment variables gcc and g++ : -I/usr/local/include/openssl

Here are all the variables that I use :

ARCH="-arch x86_64 -mmacosx-version-min=10.7"

LDFLAGS="-O3 $ARCH"

CFLAGS="-O3 -fno-common $ARCH"

CXXFLAGS="-O3 -fno-common $ARCH"

CC="gcc $ARCH -I/usr/local/include/openssl"

CXX="gcc $ARCH -I/usr/local/include/openssl"

CPP="gcc -E"

CXXCPP="g++ -E »

Regards,

arnaud

Le 15 oct. 2015 à 11:35, Aurélien Terrestris <aterrestris@xxxxxxxxx> a écrit :

Apache doesn't install because it cannot find the necessary packages. This is not a bug a normal behaviour.

You should check how to install the missing packages, this is a question that should be asked on Apple's forums.

Maybe, you can start here : http://mac-dev-env.patrickbougie.com/openssl/

Once installed, come back here if it is still not working.

2015-10-14 18:54 GMT+02:00 arnaud icard <arnaud.icard@xxxxxxxxx>:

I have finally found something. There is no /usr/include/openssl folder anymore !
I copy it from an older system version but with the new System Integrity Protection mechanism from Apple, I can’t modify the /usr/include folder.

Is there a way to bypass this ? Should I fill a bug to apache ?
I’ve already filled one via Apple bugtracker but I don’t really expect an answer…

Le mer. 23 sept. 2015 à 11:48, arnaud icard <arnaud.icard@xxxxxxxxx> a écrit :

OpenSSL is installed as the terminal command ‘openssl’ works well.

I’ll try the apple’s forums…

Thanks for your help anyway !

> Le 23 sept. 2015 à 11:43, Aurélien Terrestris <aterrestris@xxxxxxxxx> a écrit :
>
> You should check that openssl is installed ; On Linux, we install both
> openssl and openssl-devel packages, but I am dummy for OS X
>
> 2015-09-23 11:31 GMT+02:00 arnaud icard <arnaud.icard@xxxxxxxxx>:
>> I don't have this file but on the other hand I can't find any openssl
>> library file…?
>>
>> The compilation works on 10.9 an 10.10 even though the openssl version is
>> identical so I guess something different comes from the new system.
>>
>> Le mer. 23 sept. 2015 à 10:41, Aurélien Terrestris <aterrestris@xxxxxxxxx> a
>> écrit :
>>>
>>> with root account,
>>>
>>> find / -name rsa.h
>>>
>>> or
>>>
>>> locate rsa.h
>>>
>>>
>>> 2015-09-23 10:26 GMT+02:00 arnaud icard <arnaud.icard@xxxxxxxxx>:
>>>> This is what I am looking for right now but I don’t know where the libs
>>>> are stored on OS X.
>>>> Is there a terminal command that would give me this piece of information
>>>> ?
>>>>
>>>>> Le 23 sept. 2015 à 10:24, Aurélien Terrestris <aterrestris@xxxxxxxxx> a
>>>>> écrit :
>>>>>
>>>>> Is this file (rsa.h) present on your computer ?
>>>>>
>>>>> 2015-09-23 10:12 GMT+02:00 arnaud icard <arnaud.icard@xxxxxxxxx>:
>>>>>> Thanks for your help.
>>>>>> Unfortunately it didn’t worked, still the same issue.
>>>>>>
>>>>>> The configure worked when I fixed the variable ac_cv_openssl to yes:
>>>>>>   24800 ac_cv_openssl=yes
>>>>>>
>>>>>> but then an error occurred during the make:
>>>>>>   fatal error: 'openssl/rsa.h' file not found
>>>>>>
>>>>>>
>>>>>>> Le 23 sept. 2015 à 09:11, Aurélien Terrestris <aterrestris@xxxxxxxxx>
>>>>>>> a écrit :
>>>>>>>
>>>>>>> Hello
>>>>>>>
>>>>>>> in the configure file, you can remove the openssl version checking
>>>>>>> starting at line 24787
>>>>>>>
>>>>>>> 24787 #if OPENSSL_VERSION_NUMBER < 0x0090801f
>>>>>>> 24788 #error "Unsupported OpenSSL version " OPENSSL_VERSION_TEXT
>>>>>>> 24789 #endif
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>> 2015-09-22 22:53 GMT+02:00 arnaud icard <arnaud.icard@xxxxxxxxx>:
>>>>>>>> Hi there,
>>>>>>>>
>>>>>>>> I encounter an error with OpenSSL while compiling http 2.4.16 on El
>>>>>>>> Capitan
>>>>>>>> 10.11.1.
>>>>>>>>
>>>>>>>> It is looking for OpenSSL version >= 0.9.8a:
>>>>>>>>  checking for OpenSSL... checking for user-provided OpenSSL base
>>>>>>>> directory... none
>>>>>>>>  checking for OpenSSL version >= 0.9.8a... FAILED
>>>>>>>>  configure: WARNING: OpenSSL version is too old
>>>>>>>>
>>>>>>>>
>>>>>>>> The default OpenSSL version is 0.9.8zg:
>>>>>>>>  $ openssl version
>>>>>>>>  OpenSSL 0.9.8zg 14 July 2015
>>>>>>>>
>>>>>>>>
>>>>>>>> And finally here is a part of my compilation line :
>>>>>>>>  ./configure --prefix=/usr/local/MyWebserver/httpd-2.4.16 \
>>>>>>>>  --enable-ssl \
>>>>>>>>  --with-few-things... \
>>>>>>>>  --disable-lots-of-things...
>>>>>>>>
>>>>>>>>
>>>>>>>> I don't want to install another openssl even with `brew`.
>>>>>>>>
>>>>>>>>
>>>>>>>> Is it an OpenSSL bug? An apache bug? Not a bug but a mistake of
>>>>>>>> mine?
>>>>>>>> Could someone please help me on this one ?
>>>>>>>>
>>>>>>>> Regards,
>>>>>>>> arnaud
>>>>>>>> --
>>>>>>>> --
>>>>>>>>
>>>>>>>> Arnaud Icard
>>>>>>>
>>>>>>> ---------------------------------------------------------------------
>>>>>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>>>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>>>>>
>>>>>>
>>>>>>
>>>>>> ---------------------------------------------------------------------
>>>>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>>>>
>>>>>
>>>>> ---------------------------------------------------------------------
>>>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>>>
>>>>
>>>>
>>>> ---------------------------------------------------------------------
>>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>>
>>>
>>> ---------------------------------------------------------------------
>>> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
>>> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>>>
>> --
>> --
>>
>> Arnaud Icard
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
> For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
>

--

--

Arnaud Icard