You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@httpd.apache.org by "Rathore, Rajendra" <ra...@ptc.com.INVALID> on 2025/07/25 13:16:33 UTC
[users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Hi Team,
We are currently bundling the Apache HTTP Server from source on a Linux machine(RHEL 7.x/ RHEL 8.x). During the build process, we are passing a custom OpenSSL path using the --with-ssl configuration flag. However, the final build still includes a dependency on the legacy libcrypt.so.1 library.
When we attempt to run the server on a RHEL 10 environment, we encounter the following error:
./apachectl start
./httpd: error while loading shared libraries: libcrypt.so.1: cannot open shared object file: No such file or directory
This issue appears to be caused by the build process linking against the system's legacy libcrypt (from glibc), which is no longer available by default on RHEL 10.
Can you please suggest how should we proceed next.
User Below command:
AR=$AR NM=$NM STRIP=$STRIP CC="$CC" CFLAGS="$CFLAGS" CPPFLAGS="-I$OPENSSL_ROOT/include" LDFLAGS="-L$OPENSSL_ROOT/lib $LDFLAGS" CONFIG_SHELL="$CONFIG_SHELL" ./configure $CONFIG_PARAMS
CFLAGS="-O2 $CFLAGS"
CONFIG_PARAMS="--prefix=$APACHE_ROOT \
--with-expat=$EXPAT_ROOT \
--without-berkeley-db \
--enable-nonportable-atomics=yes \
--enable-exception-hook \
--enable-so \
--enable-mpms-shared=all \
--enable-mods-shared=all \
--enable-http2 \
--enable-proxy-http2 \
--disable-util-dso \
--without-pgsql \
--without-odbc \
--without-libxml2 \
--with-ssl=$OPENSSL_ROOT \
--with-ldap \
--with-ldap-include=$OPENLDAP_ROOT/include \
--with-ldap-lib=$OPENLDAP_ROOT/lib \
--with-pcre=$PCRE_ROOT/bin/pcre2-config \
--with-nghttp2=$NGHTTP2_ROOT \
--with-z"
Thanks and Regards,
Rajendra Rathore
9922701491
[users@httpd] Re: [External] : [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Posted by Jack Swan <jo...@oracle.com.INVALID>.
Try adding "--with-openssl=$OPENSSL_ROOT"
to your configure.
________________________________
From: Rathore, Rajendra <ra...@ptc.com.INVALID>
Sent: Friday, July 25, 2025 9:16 AM
To: users@httpd.apache.org <us...@httpd.apache.org>
Subject: [External] : [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Hi Team,
We are currently bundling the Apache HTTP Server from source on a Linux machine(RHEL 7.x/ RHEL 8.x). During the build process, we are passing a custom OpenSSL path using the --with-ssl configuration flag. However, the final build still includes a dependency on the legacy libcrypt.so.1 library.
When we attempt to run the server on a RHEL 10 environment, we encounter the following error:
./apachectl start
./httpd: error while loading shared libraries: libcrypt.so.1: cannot open shared object file: No such file or directory
This issue appears to be caused by the build process linking against the system's legacy libcrypt (from glibc), which is no longer available by default on RHEL 10.
Can you please suggest how should we proceed next.
User Below command:
AR=$AR NM=$NM STRIP=$STRIP CC="$CC" CFLAGS="$CFLAGS" CPPFLAGS="-I$OPENSSL_ROOT/include" LDFLAGS="-L$OPENSSL_ROOT/lib $LDFLAGS" CONFIG_SHELL="$CONFIG_SHELL" ./configure $CONFIG_PARAMS
CFLAGS="-O2 $CFLAGS"
CONFIG_PARAMS="--prefix=$APACHE_ROOT \
--with-expat=$EXPAT_ROOT \
--without-berkeley-db \
--enable-nonportable-atomics=yes \
--enable-exception-hook \
--enable-so \
--enable-mpms-shared=all \
--enable-mods-shared=all \
--enable-http2 \
--enable-proxy-http2 \
--disable-util-dso \
--without-pgsql \
--without-odbc \
--without-libxml2 \
--with-ssl=$OPENSSL_ROOT \
--with-ldap \
--with-ldap-include=$OPENLDAP_ROOT/include \
--with-ldap-lib=$OPENLDAP_ROOT/lib \
--with-pcre=$PCRE_ROOT/bin/pcre2-config \
--with-nghttp2=$NGHTTP2_ROOT \
--with-z"
Thanks and Regards,
Rajendra Rathore
9922701491
Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Posted by "Rathore, Rajendra" <ra...@ptc.com.INVALID>.
Can you please provide the details if possible will try that
Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Eric Covener <co...@gmail.com>
Sent: Friday, July 25, 2025 8:10:06 PM
To: users@httpd.apache.org <us...@httpd.apache.org>
Subject: Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
On Fri, Jul 25, 2025 at 10:28 AM Rathore, Rajendra
<ra...@ptc.com.invalid> wrote:
>
> Hi Eric,
>
> As I am new to build apache and all, can you elaborate more on how to build APR without linking to that library, as we are bundling APR also.
It's more than a build change unfortunately.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Posted by Eric Covener <co...@gmail.com>.
On Fri, Jul 25, 2025 at 10:28 AM Rathore, Rajendra
<ra...@ptc.com.invalid> wrote:
>
> Hi Eric,
>
> As I am new to build apache and all, can you elaborate more on how to build APR without linking to that library, as we are bundling APR also.
It's more than a build change unfortunately.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Posted by "Rathore, Rajendra" <ra...@ptc.com.INVALID>.
Hi Eric,
As I am new to build apache and all, can you elaborate more on how to build APR without linking to that library, as we are bundling APR also.
Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: Eric Covener <co...@gmail.com>
Sent: Friday, July 25, 2025 6:54 PM
To: users@httpd.apache.org <us...@httpd.apache.org>
Subject: Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
On Fri, Jul 25, 2025 at 9:17 AM Rathore, Rajendra
<ra...@ptc.com.invalid> wrote:
>
> Hi Team,
>
> We are currently bundling the Apache HTTP Server from source on a Linux machine(RHEL 7.x/ RHEL 8.x). During the build process, we are passing a custom OpenSSL path using the --with-ssl configuration flag. However, the final build still includes a dependency on the legacy libcrypt.so.1 library.
note that the issue is libcrypt, not libcrypto, which is about
password validation in APR and not SSL.
The symbols removed in libcrypt 2.x seem to be super obscure things.
It's a shame libcrypr.so.1 wasn't left with a semver break.
I opened a redhat ticket on this about the removal in RHEL 10 and got nowhere.
In my own object-code-only (1 per arch, not distro) products I hack
around this in APR builds by avoiding linking with it and poking
around with dlopen.
You might want to push RedHat for some toleration here.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org
Re: [users@httpd] Issue with Apache HTTP Server Build: Legacy libcrypt.so.1 Dependency on RHEL 10
Posted by Eric Covener <co...@gmail.com>.
On Fri, Jul 25, 2025 at 9:17 AM Rathore, Rajendra
<ra...@ptc.com.invalid> wrote:
>
> Hi Team,
>
> We are currently bundling the Apache HTTP Server from source on a Linux machine(RHEL 7.x/ RHEL 8.x). During the build process, we are passing a custom OpenSSL path using the --with-ssl configuration flag. However, the final build still includes a dependency on the legacy libcrypt.so.1 library.
note that the issue is libcrypt, not libcrypto, which is about
password validation in APR and not SSL.
The symbols removed in libcrypt 2.x seem to be super obscure things.
It's a shame libcrypr.so.1 wasn't left with a semver break.
I opened a redhat ticket on this about the removal in RHEL 10 and got nowhere.
In my own object-code-only (1 per arch, not distro) products I hack
around this in APR builds by avoiding linking with it and poking
around with dlopen.
You might want to push RedHat for some toleration here.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org