No! Leave it exactly as it was. What you are doing with those lines is telling Apache to build mod_ssl (--enable-ssl), and where to find the ssl libraries it should use when building mod_ssl (--with-ssl=/usr/local). By doing 'make install' with OpenSSL, you create those ssl libraries, then you tell Apache to use them for mod_ssl. I think you may have had some bad instructions the first time when you used 'make build-shared'. It sounded kind of strange to me, but hey, I don't know everything, you may have had a really good reason for doing it that way. The way I described above is a pretty standard method for doing this. On Wed, 13 Apr 2005, Plantier, Spencer wrote: > So do I take out these two lines when I build apache? > --enable-ssl \ > > --with-ssl=/usr/local \ > > > Thanks > > -----Original Message----- > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > Sent: Wednesday, April 13, 2005 5:49 PM > To: users@xxxxxxxxxxxxxxxx > Subject: RE: [users@httpd] Apache install > > Did you have a special reason for building OpenSSL with 'make > build-shared' (I assumed you did)? As far as I can tell, that seems to > be the root of the problem. If you don't have a reason, then I'd > suggest going back to the OpenSSL source, doing 'make' and 'make > install,' (the default configure options will put the libs in > /usr/local/lib for you, with the appropriate linking) then recompiling > Apache with the same configure options. Then again, I really don't > understand the purpose of 'build-shared' and moving the resulting so > files, so I may be missing something. > > On Wed, 13 Apr 2005, Plantier, Spencer wrote: > > > /configure \ > > --prefix=/usr/local/apache2 \ > > --enable-so \ > > --enable-auth-digest \ > > --enable-rewrite \ > > --enable-setenvif \ > > --enable-mime \ > > --enable-deflate \ > > --enable-ssl \ > > --with-ssl=/usr/local \ > > --enable-headers > > > > -----Original Message----- > > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > > Sent: Wednesday, April 13, 2005 4:42 PM > > To: users@xxxxxxxxxxxxxxxx > > Subject: RE: [users@httpd] Apache install > > > > In the meantime, I did a little looking myself. There is an > > equivalent, but it's entirely inappropriate in this case, and so > > dangerous to the entire system that I won't even tell you it's name > > here, lest you be tempted. You really should work out what went wrong > > > with the build(s), instead. On with that, then. What were the > > configure options for the Apache build? > > > > On Wed, 13 Apr 2005, Plantier, Spencer wrote: > > > > > I don't find ldconfig on my solaris 9 box. > > > > > > -----Original Message----- > > > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > > > Sent: Wednesday, April 13, 2005 12:12 PM > > > To: users@xxxxxxxxxxxxxxxx > > > Subject: RE: [users@httpd] Apache install > > > > > > "man ldconfig" ? ;-) > > > > > > Seriously, I couldn't help you there; I'm a Linux guy only. Maybe > > > someone else can direct you, or even tell you for sure whether I'm > > > on the right track with Solaris. I can't even _find_ ldconfig on my > > > > Solaris hosts, and I'm not sure what the Solaris equivalent would > be. > > > But I do know that you need to run it on Linux if you're moving > > > shared > > > > > objects around like that, and I assume the situation is similar for > > > other Unix systems. > > > > > > On Wed, 13 Apr 2005, Plantier, Spencer wrote: > > > > > > > > > > > I am running Solaris 9. I tried running ldconfig but couldn't > > > > figure > > > > > > out how to get it to work. > > > > -----Original Message----- > > > > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > > > > Sent: Tuesday, April 12, 2005 3:42 PM > > > > To: users@xxxxxxxxxxxxxxxx > > > > Subject: RE: [users@httpd] Apache install > > > > > > > > Now that we know your config is more or less correct, we'd have to > > > > > turn to how things were built. > > > > > > > > What OS is this? Did you run the appropriate link configuring > > > > program > > > > > > > (ldconfig, probably) after moving the .so files to /usr/local/lib? > > > > > Can you show us the configure options for your Apache build? > > > > > > > > By the way, you don't need to have two LoadModule lines for > > > mod_ssl.so. > > > > > > > > I suggested changing the example line as the simplest method to > > > > get the right configuration, but since you've obviously found some > > > > > good example configs, it's really no longer necessary. > > > > > > > > On Tue, 12 Apr 2005, Plantier, Spencer wrote: > > > > > > > > > Here is what my DSO looks like now: > > > > > > > > > > # > > > > > # Dynamic Shared Object (DSO) Support # # To be able to use the > > > > > functionality of a module which was built as a > > > > > > > > > DSO you # have to place corresponding `LoadModule' lines at this > > > > > > location so the # directives contained in it are actually > > > > > available _before_ they are used. > > > > > # Statically compiled modules (those listed by `httpd -l') do > > > > > not need > > > > > > > > > # to be loaded here. > > > > > # > > > > > # Example: > > > > > LoadModule ssl_module modules/mod_ssl.so # LoadModule > > > > > access_module > > > > > > > > modules/mod_access.so LoadModule auth_module modules/mod_auth.so > > > > > > LoadModule auth_anon_module modules/mod_auth_anon.so LoadModule > > > > > auth_dbm_module modules/mod_auth_dbm.so LoadModule > > > > > auth_digest_module modules/mod_auth_digest.so LoadModule > > > > > ext_filter_module modules/mod_ext_filter.so LoadModule > > > > > include_module modules/mod_include.so LoadModule > > > > > log_config_module > > > > > > > modules/mod_log_config.so LoadModule log_forensic_module > > > > > modules/mod_log_forensic.so LoadModule env_module > > > > > modules/mod_env.so > > > > > > > > LoadModule mime_magic_module modules/mod_mime_magic.so > > > > > LoadModule cern_meta_module modules/mod_cern_meta.so LoadModule > > > > > expires_module modules/mod_expires.so LoadModule headers_module > > > > > modules/mod_headers.so LoadModule usertrack_module > > > > > modules/mod_usertrack.so LoadModule unique_id_module > > > > > modules/mod_unique_id.so LoadModule setenvif_module > > > > > modules/mod_setenvif.so <IfDefine SSL> LoadModule ssl_module > > > > > modules/mod_ssl.so </IfDefine> LoadModule mime_module > > > > > modules/mod_mime.so LoadModule dav_module modules/mod_dav.so > > > > > LoadModule status_module modules/mod_status.so LoadModule > > > > > autoindex_module modules/mod_autoindex.so LoadModule asis_module > > > > > > modules/mod_asis.so LoadModule info_module modules/mod_info.so > > > > > LoadModule cgi_module modules/mod_cgi.so LoadModule > > > > > dav_fs_module modules/mod_dav_fs.so LoadModule > > > > > vhost_alias_module modules/mod_vhost_alias.so LoadModule > > > > > negotiation_module modules/mod_negotiation.so LoadModule > > > > > dir_module modules/mod_dir.so LoadModule imap_module > > > > > modules/mod_imap.so LoadModule actions_module > > > > > > > > modules/mod_actions.so LoadModule speling_module > > > > > modules/mod_speling.so LoadModule userdir_module > > > > > modules/mod_userdir.so LoadModule alias_module > > > > > modules/mod_alias.so LoadModule rewrite_module > > modules/mod_rewrite.so > > > > > LoadModule php5_module modules/libphp5.so > > > > > > > > > > And my httpd -l shows: > > > > > > > > > > Compiled in modules: > > > > > core.c > > > > > prefork.c > > > > > http_core.c > > > > > mod_so.c > > > > > > > > > > I still get the same error: > > > > > > > > > > Syntax error on line 231 of /usr/local/apache2/conf/httpd.conf: > > > > > Cannot load /usr/local/apache2/modules/mod_ssl.so into server: > > > > ld.so.1: > > > > > /usr/local/apache2/bin/httpd: fatal: relocation error: file > > > > > /usr/local/apache2/modules/mod_ssl.so: symbol X509_INFO_free: > > > > > referenced symbol not found > > > > > > > > > > Any help would be appreciated. > > > > > > > > > > Thanks. > > > > > > > > > > -----Original Message----- > > > > > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > > > > > Sent: Friday, April 08, 2005 2:47 PM > > > > > To: users@xxxxxxxxxxxxxxxx > > > > > Subject: RE: [users@httpd] Apache install > > > > > > > > > > So, as the instructions say, anything that doesn't show up in > > > > > 'httpd > > > > -l' > > > > > > > > > > has to be loaded in httpd.conf with a LoadModule statement. > > > > > Replace > > > > > > > > 'foo' > > > > > with 'ssl' in the example line, uncomment it, and try again. > > > > > > > > > > On Fri, 8 Apr 2005, Plantier, Spencer wrote: > > > > > > > > > > > httpd -l shows: > > > > > > # ./httpd -l > > > > > > Compiled in modules: > > > > > > core.c > > > > > > prefork.c > > > > > > http_core.c > > > > > > mod_so.c > > > > > > > > > > > > > > > > > > -----Original Message----- > > > > > > From: Craig Dunigan [mailto:cdunigan@xxxxxxxxxxxxx] > > > > > > Sent: Friday, April 08, 2005 2:25 PM > > > > > > To: users@xxxxxxxxxxxxxxxx > > > > > > Subject: RE: [users@httpd] Apache install > > > > > > > > > > > > And what does 'httpd -l' show you? > > > > > > > > > > > > On Fri, 8 Apr 2005, Plantier, Spencer wrote: > > > > > > > > > > > > > > > > > > > > This is what is shows when I do a search on DSO: > > > > > > > # > > > > > > > # Dynamic Shared Object (DSO) Support # # To be able to use > > > > > > > the functionality of a module which was built as a > > > > > > > > > > > > > DSO you # have to place corresponding `LoadModule' lines at > > > > > > > this > > > > > > > > > > location so the # directives contained in it are actually > > > > > > > available _before_ they are used. > > > > > > > # Statically compiled modules (those listed by `httpd -l') > > > > > > > do not need > > > > > > > > > > > > > # to be loaded here. > > > > > > > # > > > > > > > # Example: > > > > > > > # LoadModule foo_module modules/mod_foo.so # > > > > > > > > > > > > > > -----Original Message----- > > > > > > > From: Robert Zagarello [mailto:bzag0@xxxxxxxxx] > > > > > > > Sent: Friday, April 08, 2005 2:18 PM > > > > > > > To: users@xxxxxxxxxxxxxxxx > > > > > > > Subject: Re: [users@httpd] Apache install > > > > > > > > > > > > > > > > > > > > > Do you need to put a LoadModule directive in httpd.conf for > > ssl? > > > > > > > > > > Do > > > > > > > > > > > > a > > > > > > > > > > > > > search in your httpd.conf for "DSO". Check if your mod_ssl > > > > > > > was statically compiled using "httpd -l" which lists the > > > > > > > statically compiled modules. > > > > > > > > > > > > > > BZAG > > > > > > > +++++++++++++++++++++++ > > > > > > > > > > > > > > >From Spencer Plantier: > > > > > > > > > > > > > > I have installed openssl without any errors and php without > > > > > > > any > > > > > > errors. > > > > > > > Could someone help me troubleshoot this error. I am new to > > > > > > > apache and am starting to hit deadlines on trying to get > > > > > > > apache up and > > > > > running. > > > > > > > Any help would be greatly appreciated. > > > > > > > > > > > > > > This is how I built openssl: > > > > > > > > > > > > > > ../config > > > > > > > make > > > > > > > make build-shared > > > > > > > mv libssl.so* /usr/local/lib mv libcrypto.so* /usr/local/lib > > > > > > > > > > > > > > > > > > > > > Syntax error on line 251 of > > > > > > > /usr/local/apache2/conf/httpd.conf: > > > > > > > Cannot load /usr/local/apache2/modules/mod_ssl.so into > > > > > > > server: ld.so.1: > > > > > > > /usr/local/apache2/bin/httpd: fatal: relocation error: > > > > > > > file > > > > > > > /usr/local/apache2/modules/mod_ssl.so: symbol > > > > > > > X509_INFO_free: > > > > > > > referenced > > > > > > > symbol not found > > > > > > > # > > > > > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > - The official User-To-User support forum of the Apache HTTP > > > > Server Project. > > > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > > > > > > > ------------------------------------------------------------------ > > > > -- > > > > - The official User-To-User support forum of the Apache HTTP > > > > Server > > > Project. > > > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > > > > > -- > > > Craig Dunigan > > > IS Technical Services Specialist (I don't know what it means, > > > either) Middleware - Enterprise Info Systems - Department of Info > > > Technology University of Wisconsin, Madison > > > > > > opinions expressed are my own, not the University's > > > > > > > > > -------------------------------------------------------------------- > > > - The official User-To-User support forum of the Apache HTTP Server > > > Project. > > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > > > > -------------------------------------------------------------------- > > > - The official User-To-User support forum of the Apache HTTP Server > > Project. > > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > > -- > > Craig Dunigan > > IS Technical Services Specialist (I don't know what it means, either) > > Middleware - Enterprise Info Systems - Department of Info Technology > > University of Wisconsin, Madison > > > > opinions expressed are my own, not the University's > > > > > > --------------------------------------------------------------------- > > The official User-To-User support forum of the Apache HTTP Server > > Project. > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > > > --------------------------------------------------------------------- > > The official User-To-User support forum of the Apache HTTP Server > Project. > > See <URL:http://httpd.apache.org/userslist.html> for more info. > > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > > -- > Craig Dunigan > IS Technical Services Specialist (I don't know what it means, either) > Middleware - Enterprise Info Systems - Department of Info Technology > University of Wisconsin, Madison > > opinions expressed are my own, not the University's > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server > Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > > > --------------------------------------------------------------------- > The official User-To-User support forum of the Apache HTTP Server Project. > See <URL:http://httpd.apache.org/userslist.html> for more info. > To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx > " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx > For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx > -- Craig Dunigan IS Technical Services Specialist (I don't know what it means, either) Middleware - Enterprise Info Systems - Department of Info Technology University of Wisconsin, Madison opinions expressed are my own, not the University's --------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|