You are viewing a plain text version of this content. The canonical link for it is here.
Posted to bugs@httpd.apache.org by bu...@apache.org on 2012/07/02 20:25:05 UTC

[Bug 53496] New: problems with fc17 and openssl 1.0.1c

https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

          Priority: P2
            Bug ID: 53496
          Assignee: bugs@httpd.apache.org
           Summary: problems with fc17 and openssl 1.0.1c
          Severity: blocker
    Classification: Unclassified
                OS: Linux
          Reporter: alcol@hotmail.com
          Hardware: PC
            Status: NEW
           Version: 2.4.2
         Component: mod_ssl
           Product: Apache httpd-2

I installed a fresh Fedora 17

I compiled in a fine way httpd 2.2.17 with LDAP libs and SSL with OpenSSL
shipped with Fedora 17 installation

I decided to install openssl v 1.0.1c

from when I compiled and installed it I got in troubles!

I even done     yum reinstall openssl   but nothing

I get configure errors that say that SSL libs are wrong or missing

I tried   export       LIBS=-lidl     but nothing! I got compile errors with
old HTTPD v 2.1 or 2.2

I downgraded OPENSSL from www.openssl.org but the same

With openssl v 1.0.1c and httpd 2.4.2 I get no errors on configure but on make
I get

osi/dev/apache/httpd-2.4.2/modules/mappers -prefer-pic -c ssl_util_stapling.c
&& touch ssl_util_stapling.slo
/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -g -O2
-pthread     -D_REENTRANT -D_GNU_SOURCE    -I.
-I/home/colosi/dev/apache/httpd-2.4.2/os/unix
-I/home/colosi/dev/apache/httpd-2.4.2/include -I/usr/local/apr/include/apr-1
-I/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/include/
-I/usr/local/include -I/home/colosi/dev/apache/httpd-2.4.2/modules/aaa
-I/home/colosi/dev/apache/httpd-2.4.2/modules/cache
-I/home/colosi/dev/apache/httpd-2.4.2/modules/core
-I/home/colosi/dev/apache/httpd-2.4.2/modules/database
-I/home/colosi/dev/apache/httpd-2.4.2/modules/filters
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ldap
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/loggers
-I/home/colosi/dev/apache/httpd-2.4.2/modules/lua
-I/home/colosi/dev/apache/httpd-2.4.2/modules/proxy
-I/home/colosi/dev/apache/httpd-2.4.2/modules/session -I/usr/local/ssl/include
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ssl
-I/home/colosi/dev/apache/httpd-2.4.2/modules/test
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/arch/unix
-I/home/colosi/dev/apache/httpd-2.4.2/modules/dav/main
-I/home/colosi/dev/apache/httpd-2.4.2/modules/generators
-I/home/colosi/dev/apache/httpd-2.4.2/modules/mappers -prefer-pic -c ssl_util.c
&& touch ssl_util.slo
/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -g -O2
-pthread     -D_REENTRANT -D_GNU_SOURCE    -I.
-I/home/colosi/dev/apache/httpd-2.4.2/os/unix
-I/home/colosi/dev/apache/httpd-2.4.2/include -I/usr/local/apr/include/apr-1
-I/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/include/
-I/usr/local/include -I/home/colosi/dev/apache/httpd-2.4.2/modules/aaa
-I/home/colosi/dev/apache/httpd-2.4.2/modules/cache
-I/home/colosi/dev/apache/httpd-2.4.2/modules/core
-I/home/colosi/dev/apache/httpd-2.4.2/modules/database
-I/home/colosi/dev/apache/httpd-2.4.2/modules/filters
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ldap
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/loggers
-I/home/colosi/dev/apache/httpd-2.4.2/modules/lua
-I/home/colosi/dev/apache/httpd-2.4.2/modules/proxy
-I/home/colosi/dev/apache/httpd-2.4.2/modules/session -I/usr/local/ssl/include
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ssl
-I/home/colosi/dev/apache/httpd-2.4.2/modules/test
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/arch/unix
-I/home/colosi/dev/apache/httpd-2.4.2/modules/dav/main
-I/home/colosi/dev/apache/httpd-2.4.2/modules/generators
-I/home/colosi/dev/apache/httpd-2.4.2/modules/mappers -prefer-pic -c
ssl_util_ssl.c && touch ssl_util_ssl.slo
/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -g -O2
-pthread     -D_REENTRANT -D_GNU_SOURCE    -I.
-I/home/colosi/dev/apache/httpd-2.4.2/os/unix
-I/home/colosi/dev/apache/httpd-2.4.2/include -I/usr/local/apr/include/apr-1
-I/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/include/
-I/usr/local/include -I/home/colosi/dev/apache/httpd-2.4.2/modules/aaa
-I/home/colosi/dev/apache/httpd-2.4.2/modules/cache
-I/home/colosi/dev/apache/httpd-2.4.2/modules/core
-I/home/colosi/dev/apache/httpd-2.4.2/modules/database
-I/home/colosi/dev/apache/httpd-2.4.2/modules/filters
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ldap
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/loggers
-I/home/colosi/dev/apache/httpd-2.4.2/modules/lua
-I/home/colosi/dev/apache/httpd-2.4.2/modules/proxy
-I/home/colosi/dev/apache/httpd-2.4.2/modules/session -I/usr/local/ssl/include
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ssl
-I/home/colosi/dev/apache/httpd-2.4.2/modules/test
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/arch/unix
-I/home/colosi/dev/apache/httpd-2.4.2/modules/dav/main
-I/home/colosi/dev/apache/httpd-2.4.2/modules/generators
-I/home/colosi/dev/apache/httpd-2.4.2/modules/mappers -prefer-pic -c
ssl_engine_ocsp.c && touch ssl_engine_ocsp.slo
/usr/local/apr/build-1/libtool --silent --mode=compile gcc -std=gnu99 -g -O2
-pthread     -D_REENTRANT -D_GNU_SOURCE    -I.
-I/home/colosi/dev/apache/httpd-2.4.2/os/unix
-I/home/colosi/dev/apache/httpd-2.4.2/include -I/usr/local/apr/include/apr-1
-I/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/include/
-I/usr/local/include -I/home/colosi/dev/apache/httpd-2.4.2/modules/aaa
-I/home/colosi/dev/apache/httpd-2.4.2/modules/cache
-I/home/colosi/dev/apache/httpd-2.4.2/modules/core
-I/home/colosi/dev/apache/httpd-2.4.2/modules/database
-I/home/colosi/dev/apache/httpd-2.4.2/modules/filters
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ldap
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/loggers
-I/home/colosi/dev/apache/httpd-2.4.2/modules/lua
-I/home/colosi/dev/apache/httpd-2.4.2/modules/proxy
-I/home/colosi/dev/apache/httpd-2.4.2/modules/session -I/usr/local/ssl/include
-I/home/colosi/dev/apache/httpd-2.4.2/modules/ssl
-I/home/colosi/dev/apache/httpd-2.4.2/modules/test
-I/home/colosi/dev/apache/httpd-2.4.2/server
-I/home/colosi/dev/apache/httpd-2.4.2/modules/arch/unix
-I/home/colosi/dev/apache/httpd-2.4.2/modules/dav/main
-I/home/colosi/dev/apache/httpd-2.4.2/modules/generators
-I/home/colosi/dev/apache/httpd-2.4.2/modules/mappers -prefer-pic -c
ssl_util_ocsp.c && touch ssl_util_ocsp.slo
/usr/local/apr/build-1/libtool --silent --mode=link gcc -std=gnu99 -g -O2
-pthread    -L/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/lib/  
   -o mod_ssl.la -rpath /usr/local/apache2/modules -module -avoid-version 
mod_ssl.lo ssl_engine_config.lo ssl_engine_dh.lo ssl_engine_init.lo
ssl_engine_io.lo ssl_engine_kernel.lo ssl_engine_log.lo ssl_engine_mutex.lo
ssl_engine_pphrase.lo ssl_engine_rand.lo ssl_engine_vars.lo ssl_scache.lo
ssl_util_stapling.lo ssl_util.lo ssl_util_ssl.lo ssl_engine_ocsp.lo
ssl_util_ocsp.lo  -L/usr/local/ssl/lib -lssl -lcrypto -luuid -lrt -lcrypt
-lpthread -ldl -export-symbols-regex ssl_module
/bin/ld: /usr/local/ssl/lib/libssl.a(s3_srvr.o): relocation R_X86_64_32 against
`.rodata' can not be used when making a shared object; recompile with -fPIC
/usr/local/ssl/lib/libssl.a: could not read symbols: Bad value
collect2: error: ld returned 1 exit status
make[4]: *** [mod_ssl.la] Error 1
make[4]: Leaving directory `/home/colosi/dev/apache/httpd-2.4.2/modules/ssl'
make[3]: *** [shared-build-recursive] Error 1
make[3]: Leaving directory `/home/colosi/dev/apache/httpd-2.4.2/modules/ssl'
make[2]: *** [shared-build-recursive] Error 1
make[2]: Leaving directory `/home/colosi/dev/apache/httpd-2.4.2/modules'
make[1]: *** [shared-build-recursive] Error 1
make[1]: Leaving directory `/home/colosi/dev/apache/httpd-2.4.2'
make: *** [all-recursive] Error 1
[root@xxxx httpd-2.4.2]#


configure line is:
./configure --enable-deflate --enable-mime-magic --enable-expires
--enable-usertrack --enable-unique-id --enable-ssl --with-ssl=/usr/local/ssl
--enable-http --enable-mod-info --enable-info --enable-cgi --enable-cgid
--enable-spelling --enable-module=all --with-ldap --enable-ldap
--enable-auth-ldap --enable-authnz-ldap
--with-ldap-include=/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/include/
--with-ldap-lib=/home/colosi/dev/ldap/novell-cldap-devel-2006.02.20-1linux/lib/
--enable-substitute --enable-rewrite --disable-userdir --enable-log-forensic

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 53496] problems with fc17 and openssl 1.0.1c

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

--- Comment #5 from William A. Rowe Jr. <wr...@apache.org> ---
As a hint (for the bug monitoring community as well as yourself)... you were
using a system openssl package?  You always need to install the corresponding
-devel (or -dev) packages.  Since it only found openssl.a it refused to link
against openssl.so.n because it was looking for an openssl.so symlink to that
version.  Anytime we see modules linking against .a packages, we expect you
are in pretty bad shape.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 53496] problems with fc17 and openssl 1.0.1c

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

--- Comment #2 from Alberto Colosi <al...@hotmail.com> ---
I don't know how to proceed to compile it so to follow this istruction

if you guide me, I could try

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 53496] problems with fc17 and openssl 1.0.1c

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEEDINFO                    |RESOLVED
         Resolution|---                         |INVALID

--- Comment #4 from Eric Covener <co...@gmail.com> ---
Maybe you can find some help on a fedora mailing list or the Apache HTTP Server
users mailing list:

http://httpd.apache.org/userslist.html

Bugzilla is reserved for bug reporting, not support/discussion/assistance.

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 53496] problems with fc17 and openssl 1.0.1c

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

Eric Covener <co...@gmail.com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |NEEDINFO

--- Comment #1 from Eric Covener <co...@gmail.com> ---
> /bin/ld: /usr/local/ssl/lib/libssl.a(s3_srvr.o): relocation R_X86_64_32
> against `.rodata' can not be used when making a shared object; recompile
> with -fPIC

What happens when you recompile openssl with -fPIC like the message says?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org


[Bug 53496] problems with fc17 and openssl 1.0.1c

Posted by bu...@apache.org.
https://issues.apache.org/bugzilla/show_bug.cgi?id=53496

--- Comment #3 from Alberto Colosi <al...@hotmail.com> ---
I searched a bit on internet! it compiled

from history, recompiled openssl and then apache

  435  make clean
  436  ./config shared
  437  make
  438  make install
  439  cd ..
  440  cd apache/
  441  cd httpd-2.
  442  cd httpd-2.4.2/
  443  make clean
  444  ../../conf/conf-apache.sh
  445  make
  446  make install
  447  history

found ./config fips -fPIC       
too but untried

result:

Server version: Apache/2.4.2 (Unix)
Server built:   Jul  3 2012 00:34:45
Server's Module Magic Number: 20120211:3
Server loaded:  APR 1.4.2, APR-UTIL 1.3.10
Compiled using: APR 1.4.2, APR-UTIL 1.3.10
Architecture:   64-bit
Server MPM:     event
  threaded:     yes (fixed thread count)
    forked:     yes (variable process count)
Server compiled with....
 -D APR_HAS_SENDFILE
 -D APR_HAS_MMAP
 -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled)
 -D APR_USE_SYSVSEM_SERIALIZE
 -D APR_USE_PTHREAD_SERIALIZE
 -D APR_HAS_OTHER_CHILD
 -D AP_HAVE_RELIABLE_PIPED_LOGS
 -D DYNAMIC_MODULE_LIMIT=256
 -D HTTPD_ROOT="/usr/local/apache2"
 -D SUEXEC_BIN="/usr/local/apache2/bin/suexec"
 -D DEFAULT_PIDLOG="logs/httpd.pid"
 -D DEFAULT_SCOREBOARD="logs/apache_runtime_status"
 -D DEFAULT_ERRORLOG="logs/error_log"
 -D AP_TYPES_CONFIG_FILE="conf/mime.types"
 -D SERVER_CONFIG_FILE="conf/httpd.conf"


ONLY I FIND STRANGE! I ever compile in "COMPILED IN MODULES" all inside same
executable! not mod to be inserted from conf file

owever from httpd -l it say

Compiled in modules:
  core.c
  mod_so.c
  http_core.c
  event.c


I find mod_ssl.so and other not internally linked ! has been compiled outside
as loadable modules!

anything different from apache 2.0 to have modules linked inside httpd?

-- 
You are receiving this mail because:
You are the assignee for the bug.

---------------------------------------------------------------------
To unsubscribe, e-mail: bugs-unsubscribe@httpd.apache.org
For additional commands, e-mail: bugs-help@httpd.apache.org