You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2014/01/28 11:44:01 UTC

[Bug 56072] New: OpenSSL higher than 0.97 dependancy

https://issues.apache.org/bugzilla/show_bug.cgi?id=56072

            Bug ID: 56072
           Summary: OpenSSL higher than 0.97 dependancy
           Product: Apache httpd-2
           Version: 2.4.7
          Hardware: Sun
                OS: Solaris
            Status: NEW
          Severity: blocker
          Priority: P2
         Component: mod_ssl
          Assignee: bugs@httpd.apache.org
          Reporter: igor.antolovic.ext@siemens.com

Hi,

when installing an new Apache version (2.4.7) on Our Solaris 10 platform, we
are faced with an issue of unsupported OpenSSL version. 

Apache 2.4.7 requires OpenSSL version higher than 0.97, ant throws an exception
during integration.

I have checked changes made in the new version and found the following note:

  *) mod_ssl, configure: Require OpenSSL 0.9.8a or later. [Kaspar Brand]


The problem is that Solaris 10 does not support OpenSSL versions higher than
0.97 (information received directly from Oracle), and therefor we can not
integrate the new version.

Is there any workaround for this issue?
What what is the reason for mandatory using of OpenSSL versions higher than
0.97?
What would be the ramifications of patching the code of Apache 2.4.7 so it
allows 0.97 version of OpenSSL to be used?

BR
Igor

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 56072] OpenSSL higher than 0.97 dependancy

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56072

Igor A. <ig...@siemens.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |igor.antolovic.ext@siemens.
                   |                            |com

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 56072] OpenSSL higher than 0.97 dependancy

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=56072

Rainer Jung <ra...@kippdata.de> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |INVALID

--- Comment #1 from Rainer Jung <ra...@kippdata.de> ---
Please see the discussion at

http://markmail.org/thread/c6tcuf5w7xahvj4g

Concerning Solaris: OpenSSL is part of the sfw additions and not linked into
any system library. So if you need to run Apache httpd 2.4 on top of Solaris 10
(Solaris 11 is at OpenSSL 1.0.0), then just compile OpenSSL recent before and
install it to a custom place. You can tell httpd where to find your OpenSSL
during the Apache build procedure.

Dropping support for OpenSSL 0.9.7 was done in http://svn.apache.org/r1527294
as a prerequisite step for http://svn.apache.org/r1527295. Both were backported
to 2.4 as part of http://svn.apache.org/r1542327.

Regards,

Rainer

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org