|
Hi, I compiled apache http server with modSecurity 2.9.4 on RHEL-7 and RHEL-8. I was able to start RHEL-7 but not RHEL-8 I am getting below error while startup on RHEL-8 server. After research I deleted libcrypto.so.1.1 and libcrypto.so from under apache/lib folder and It started. Now I am not sure if deleting libcrypto.so.1.1 will cause any issue. Does anyone
know if that is change for RHEL-8 server with modSecurity? Error Details and modsecurity2.so differences on both RHEL-7 and 8 servers httpd: Syntax error on line 94 of /home/Dev/conf/httpd.conf: Syntax error on line 1 of /home/Dev/conf/httpd-modsecurity.conf:
Cannot load modules/mod_security2.so into server: /lib64/libk5crypto.so.3: undefined symbol: EVP_KDF_ctrl, version OPENSSL_1_1_1b For RHEL-7 OUTPUT for --
ldd mod_security2.so . . libssl.so.1.1 => not found libcrypto.so.1.1 => not found libz.so.1 => /lib64/libz.so.1 (0x00007f528d332000) liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f528d10c000) liblua-5.1.so => /lib64/liblua-5.1.so (0x00007f528cede000) libm.so.6 => /lib64/libm.so.6 (0x00007f528cbdc000) libdl.so.2 => /lib64/libdl.so.2 (0x00007f528c9d8000) libc.so.6 => /lib64/libc.so.6 (0x00007f528c3ec000) libssl.so.10 => /lib64/libssl.so.10 (0x00007f528c17a000) libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f528bd17000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f528baca000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f528b7e1000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f528b5ae000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f528b3aa000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f528b19a000) /lib64/ld-linux-x86-64.so.2 (0x00007f528f580000) libfreebl3.so => /lib64/libfreebl3.so (0x00007f528af97000) libssl.so.1.1 => not found
libcrypto.so.1.1 => not found libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f528ad93000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f528ab6c000) nm -D /lib64/libk5crypto.so.3 | grep EVP_KDF_ctrl --no output— For RHEL-8 OUTPUT for -- nm -D /lib64/libk5crypto.so.3 | grep -i EVP_KDF_ctrl U EVP_KDF_ctrl OUTPUT for -- ldd mod_security2.so . .. libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007fe6452bf000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007fe644dd6000) libzstd.so.1 => /lib64/libzstd.so.1 (0x00007fe644b32000) libxml2.so.2 => /lib64/libxml2.so.2 (0x00007fe6447ca000) libz.so.1 => /lib64/libz.so.1 (0x00007fe6445b3000) liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe64438c000) liblua-5.3.so => /lib64/liblua-5.3.so (0x00007fe644151000) libm.so.6 => /lib64/libm.so.6 (0x00007fe643dcf000) libdl.so.2 => /lib64/libdl.so.2 (0x00007fe643bcb000) libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe64395a000) libc.so.6 => /lib64/libc.so.6 (0x00007fe643595000) libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fe643340000) libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fe643056000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fe642e3f000) libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fe642c3b000) /lib64/ld-linux-x86-64.so.2 (0x00007fe646de5000) libnghttp2.so.14 => /lib64/libnghttp2.so.14 (0x00007fe642a14000) libidn2.so.0 => /lib64/libidn2.so.0 (0x00007fe6427f6000) libssh.so.4 => /lib64/libssh.so.4 (0x00007fe642587000) libpsl.so.5 => /lib64/libpsl.so.5 (0x00007fe642376000) libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x00007fe642169000) libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fe641f58000) libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fe641d54000) libunistring.so.2 => /lib64/libunistring.so.2 (0x00007fe6419d3000) libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x00007fe6417b2000) libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fe641588000) libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007fe641304000) Regards, Dev |
|