LinuxQuestions.org
Help answer threads with 0 replies.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 04-07-2014, 12:53 PM   #1
saiyen2002
Member
 
Registered: Dec 2006
Location: London, UK
Distribution: Centos, Fedora
Posts: 53

Rep: Reputation: 0
upgrading apache to 2.4.9 openssl error SSL_get_srp_userinfo


I am running Centos 6.5 2.6.32-431.11.2.el6.x86_64.

I have Apache PHP and openssl which I compiled from source

apache2.4.7
php 5.5.10
openssl 1.0.1f

I have updated apache to 2.4.9 on another instance sucessfully, but on this server I get the following error.

Code:
httpd: Syntax error on line 129 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/mod_ssl.so into server: /usr/local/apache2/modules/mod_ssl.so: undefined symbol: SSL_get_srp_userinfo
my config for the openssl is

Code:
./config --prefix=/usr/local --openssldir=/usr/local/openssl -fPIC
my config for apache, which is the config.nice for the previous 2.4.7 install is
Code:
"./configure" \
"--enable-so" \
"--with-included-apr" \
"--enable-ssl" \
"--with-ssl=/usr/local/openssl" \

I can see from the config.status that it is looking in the right place for the ssl
Code:
S["MOD_SSL_LDADD"]="-export-symbols-regex ssl_module"
S["ab_LDFLAGS"]="-L/usr/local/openssl/lib -lssl -lcrypto -lrt -lcrypt -lpthread"
S["ab_CFLAGS"]="-I/usr/local/openssl/include"

however when doing an ldd on the actual mod_ssl.so shows something totally different then what I see on all the other apache installation that I have working with mod_ssl.

normally on all the working installation I see something like


Code:
# ldd /usr/local/apache2/modules/mod_ssl.so
        linux-vdso.so.1 =>  (0x00007fff489ff000)
        librt.so.1 => /lib64/librt.so.1 (0x00007f839028d000)
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f8390056000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f838fe38000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f838faa5000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f83908bd000)
        libfreebl3.so => /lib64/libfreebl3.so (0x00007f838f843000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f838f63e000)

however, on this particular installation, i see

Code:
# ldd /usr/local/apache2/modules/mod_ssl.so
        linux-vdso.so.1 =>  (0x00007ffff1bff000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f93f743b000)
        librt.so.1 => /lib64/librt.so.1 (0x00007f93f7232000)
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x00007f93f6ffb000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f93f6dde000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f93f6a49000)
        libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f93f6805000)
        libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f93f651f000)
        libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f93f631a000)
        libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f93f60ee000)
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f93f5d0e000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f93f5b09000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f93f58f3000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f93f7a7b000)
        libfreebl3.so => /lib64/libfreebl3.so (0x00007f93f567c000)
        libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f93f5470000)
        libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f93f526d000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x00007f93f5053000)
        libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f93f4e33000)
this is a lot more extensive. I Do not think this could be because apache is not reading from the correct location for openssl.

Any suggestions are welcome.

thanks,

Last edited by saiyen2002; 04-07-2014 at 01:06 PM.
 
Old 04-08-2014, 12:45 AM   #2
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 12,827

Rep: Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866
You should define LDFLAGS, CPPFLAGS in config.nice:
Code:
CPPFLAGS="-I/usr/local/openssl/include"; export CPPFLAGS
LDFLAGS="-L/usr/local/openssl/lib"; export LDFLAGS
"./configure" \
"--enable-so" \
"--with-included-apr" \
"--enable-ssl" \
"--with-ssl=/usr/local/openssl" \
"LDFLAGS=-L/usr/local/openssl/lib" \
"CPPFLAGS=-I/usr/local/openssl/include" \
"$@"
Don't forget to run "make distclean" before recompiling

Regards
 
Old 04-08-2014, 04:39 PM   #3
saiyen2002
Member
 
Registered: Dec 2006
Location: London, UK
Distribution: Centos, Fedora
Posts: 53

Original Poster
Rep: Reputation: 0
bathory, that did not work. I got the same problem.

In light of the recent news about the vulnerability of openssl, I will install the new version of 1.0.1g and recompile.

will post on how that goes.
 
Old 04-09-2014, 04:43 AM   #4
bathory
LQ Guru
 
Registered: Jun 2004
Location: Piraeus
Distribution: Slackware
Posts: 12,827

Rep: Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866Reputation: 1866
Quote:
Originally Posted by saiyen2002 View Post
bathory, that did not work. I got the same problem.

In light of the recent news about the vulnerability of openssl, I will install the new version of 1.0.1g and recompile.

will post on how that goes.
Did you run make "distclean" before recompiling apache?. Your mod_ssl clearly uses the system openssl, instead of the one you've installed at /usr/local/openssl:
Code:
ldd /usr/local/apache2/modules/mod_ssl.so
        linux-vdso.so.1 =>  (0x00007ffff1bff000)
        libssl.so.10 => /usr/lib64/libssl.so.10 (0x00007f93f743b000)
        <snip>
        libcrypto.so.10 => /usr/lib64/libcrypto.so.10 (0x00007f93f5d0e000)
        <snip>
Maybe you have to export also the LD_LIBRARY_PATH, before restarting apache:
Code:
export LD_LIBRARY_PATH=/usr/local/openssl/lib:$LD_LIBRARY_PATH
 
Old 04-10-2014, 01:36 PM   #5
saiyen2002
Member
 
Registered: Dec 2006
Location: London, UK
Distribution: Centos, Fedora
Posts: 53

Original Poster
Rep: Reputation: 0
OK, it is working now.

thanks bathory
 
  


Reply

Tags
apache2, ssl


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Upgrading openssl and apache question kaplan71 Linux - Software 2 10-31-2013 10:40 AM
SSL Error 12263 on OpenSUSE 10.2 running Apache 2, and OpenSSL 0.9.8d ieduarte73 Linux - Server 1 03-30-2008 08:16 AM
upgrading openssl bentz Linux - Software 1 05-19-2007 01:23 AM
apache 2.0.55 & openssl 0.9.8 error? ziggie216 Linux - Software 4 11-27-2005 08:37 PM
Apache + SSL + Upgrading OpenSSL shared lib TruckStuff Linux - Security 2 07-06-2005 05:41 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 09:02 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration