Hello, I successfully built a FIPS openssl based mod_ssl for Apache 2.4.39. Everything works great via SSL when I boot Apache, EXCEPT when I then turn on mod_ldap/mod_authnz_ldap, THEN I get the below openssl library version mismatch. The SSL will still work, but it display the below warning. LoadModule authnz_ldap_module modules/mod_authnz_ldap.so LoadModule ldap_module modules/mod_ldap.so [Fri May 03 14:59:56.611785 2019] [ssl:warn] [pid 5119] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.0.2r 26 Feb 2019, version currently loaded is OpenSSL 1.0.0-fips 29 Mar 2010) - may result in undefined or erroneous behavior [Fri May 03 14:59:56.661788 2019] [ssl:notice] [pid 5119] AH01884: Operating in SSL FIPS mode [Fri May 03 14:59:56.690429 2019] [ssl:warn] [pid 5120] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.0.2r 26 Feb 2019, version currently loaded is OpenSSL 1.0.0-fips 29 Mar 2010) - may result in undefined or erroneous behavior [Fri May 03 14:59:56.739818 2019] [ssl:notice] [pid 5120] AH01884: Operating in SSL FIPS mode [Fri May 03 14:59:56.744802 2019] [mpm_prefork:notice] [pid 5120] AH00163: Apache/2.4.39 (Unix) OpenSSL/1.0.0-fips configured -- resuming normal operations BUILT APR-UTIL: ./configure -prefix=/u01/tomcat/scm2/apr-util-1.6.1 --with-apr=/u01/tomcat/scm2/apr-1.6.5 --with-ldap --with-crypto --with-openssl=/u01/tomcat/scm2/openssl-1.0.2r LDFLAGS=-L/u01/tomcat/scm2/openssl-fips-2.0.16/lib -L/u01/tomcat/scm2/openssl-1.0.2 r/lib BUILT httpd apache 2.4.39 ./configure --prefix=/u01/tomcat/scm2/apache2.4.39kerb2 --with-ssl=/u01/tomcat/scm2/openssl-1.0.2r --with-mpm=prefork --with-ldap --with-apr=/u01/tomcat/scm2/apr-1.6.5 --with-apr-util=/u01/tomcat/scm2/apr-util-1.6.1 --enable-ssl --enable-dav --en able-dav-fs --enable-dav-lock --enable-authnz-ldap --enable-ldap -enable-headers CPPFLAGS=-DHAVE_FIPS LDFLAGS=-L/u01/tomcat/scm2/openssl-fips-2.0.16/lib -L/u01/tomcat/scm2/openssl-1.0.2r/lib --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|