On Thu, Feb 20, 2014 at 6:35 AM, Tom Browder <tom.brow...@gmail.com> wrote:
> On Thu, Feb 20, 2014 at 1:50 AM, William A. Rowe Jr. <wmr...@gmail.com> wrote:
>> There is no embedded.  httpd-2.2 included apr, apr-util.  httpd-2.4 by
>> vote of the PMC excluded apr, apr-util, so you might be imagining
>
> Sorry, sloppy terminology: I built httpd with apr and apr-util inside
> its tree, i.e., with configuration option:
>
>   --with-included-apr

Okay, I started over and it looks like I have a good shared library set up.

Here is a fragment of my httpd configuration log:

checking whether to enable mod_ssl... checking dependencies
checking for OpenSSL... checking for user-provided OpenSSL base
directory... /usr/local/ssl
  adding "-I/usr/local/ssl/include" to CPPFLAGS
  setting MOD_CFLAGS to "-I/usr/local/ssl/include"
  setting ab_CFLAGS to "-I/usr/local/ssl/include"
  adding "-L/usr/local/ssl/lib" to LDFLAGS
  setting MOD_LDFLAGS to "-L/usr/local/ssl/lib"
  adding "-lssl" to MOD_LDFLAGS
  setting LIBS to "-lssl -lcrypto  -lrt -lcrypt  -lpthread -ldl"
  forcing ab_LDFLAGS to "-L/usr/local/ssl/lib -lssl -lcrypto -lrt
-lcrypt -lpthread -ldl"
checking openssl/engine.h usability... yes
...

However, when I start httpd I get this message in my error.log:

[Thu Feb 20 10:45:19.104311 2014] [ssl:warn] [pid 8992:tid 3075369280]
AH01882: Init: this version of mod_ssl was compiled against a newer
library (OpenSSL 1.0.1f 6 Jan 2014, version currently loaded is
OpenSSL 1.0.1e 11 Feb 2013) - may result in undefined or erroneous
behavior
[Thu Feb 20 10:45:19.104451 2014] [ssl:debug] [pid 8992:tid
3075369280] ssl_engine_pphrase.c(181): AH02199: SSL not enabled on
vhost tbrowde.net:80, skipping SSL setup

So how can I force httpd to load the new library?  I know I can use
tricks with a wrapper script and LD_LIBRARY_CONFIG but is there
something I can do in the configuration step instead?

Otherwise I guess I can fall back to the package installed version of
ssl (bummer).

(BTW, my host is Debian Linux 7, 32-bit.)

Thanks.

-Tom

P.S. I  can include all configuration and build logs and confiuration
options used for openssl and httpd if wanted.

Reply via email to