Hello forum.

I have an RHEL 4 installation running Apache 2.2.4 with mod_ssl 2.2.4. The system has Openssl-0.9.7a installed natively. I was able to download, compile and install Openssl-0.9.7m, and generate a key and cert with it, and get ssl to work with apache. I also renamed the old openssl binary (/usr/bin/openssl) and symlinked to the new one in /usr/local/ssl/bin/.

When looking at the headers for the http server, I see it's using the 9.7a version of Openssl, so I tried recompiling Apache with the new version and the headers never change.

Here's my config statement for apache:

./configure --prefix=/opt/apache --enable-mods-shared=most --enable-proxy --enable-proxy-http --enable-ssl=shared --with-ssl=/usr/local/ssl/bin/

Can anyone tell me why Apache insists on compiling with the old version?

Thanks a bunch...

Any takers? I know it's probably something rudimentary that I've overlooked, but I'd really appreciate some input. Thanks...

Let me Phrase the question this way. Is there any reason configure for apache would refer to any other openssl installation besides the one specified with the --with-ssl compile directive?

Is the --with-ssl directive supposed to point to the openssl binary itself, or the directory in which it resides?

Thanks...

In case anyone was actually curious, the issue was with the syntax of my apache configure statement. The directive needs to point at the parent directory of the lib dir in the compiled openssl package.