Re: Compiling apache+mod_ssl+php3 in UK/Europe ... RedHat 6.1?

2000-03-09 Thread Cliff Rayman

No problem for me on RedHat 6.1 with apache 1.3.12 and mod_ssl 2.60 and mod_perl 1.21.
sorry - don't use php.

cliff rayman
genwax.com

tim wrote:

> hello ...
>
> The whole thing ... apache 1.3.12, the newest mod_ssl, newest mod_perl and php 
>compiled nicely for me in Red
> Hat 5.2. The only bug I had was the php/database support ... but this list is not 
>about that :-))
>
> Question: should all this compile out of the box on a Red Hat 6.1 box as well, like 
>on my Red Hat 5.2 box? I
> really hope so ... I dread using the rpm's.
>
> tim
>
> p.s. my rh box -- www.priroda.xs4all.nl
>
> On Mon, Mar 06, 2000 at 04:22:52PM -, Andy Hughes wrote:
> > Hello all,
> > I've been trying without success to build an apache server that incorporates
> > both mod_ssl and php.
> > I am getting stuck and repeatedly trip up on detail - if anyone has built
> > this within the UK, with all the UK-specific settings I would greatly
> > appreciate any guidance!
> >
> > If anyone can help here is my sorry tale ... this is a bit long so please
> > accept my apologies in advance.
> >
> > Hardware/OS: RedHat Linux 6.1 on an HP E60 server.
> >
> > Using the following source trees:
> >
> > /usr/src/apache_1.3.12
> > /usr/src/mm-1.0.12
> > /usr/src/mod_ssl-2.6.1-1.3.12
> > /usr/src/openssl-0.9.5
> > /usr/src/php-3.0.15
> >
> > In addition I have MySQL 3.22.32 installed and working in /usr/local/mysql.
> >
> > Combining advice from the mod_ssl, openssl and php documentation I tried
> > several times to do the various builds.
> > The last attempt (last week, it's taken me this long to calm down :-) which
> > got closest gave me the following error:
> >
> >
> >
> > I'm mostly there but towards the end when "make"-ing Apache I get:
> >
> > <=== src/modules/standard
> > ===> src/modules/ssl
> > gcc -c  -I../../os/unix -I../../include   -DLINUX=2 -DMOD_SSL=206101
> > -DUSE_HSREG
> > EX -DEAPI -DUSE_EXPAT -I../../lib/expat-lite `../../apaci` -fpic
> > -DSHARED_MODULE
> >  -DSSL_COMPAT -DSSL_USE_SDBM -I/usr/local/ssl/include
> > -DMOD_SSL_VERSION=\"2.6.1\
> > " mod_ssl.c && mv mod_ssl.o mod_ssl.lo
> > In file included from /usr/local/ssl/include/openssl/pem.h:66,
> >  from /usr/local/ssl/include/openssl/ssl.h:147,
> >  from mod_ssl.h:96,
> >  from mod_ssl.c:65:
> > /usr/local/ssl/include/openssl/evp.h:97: openssl/idea.h: No such file
> > or directory
> > make[4]: *** [mod_ssl.lo] Error 1
> > make[3]: *** [all] Error 1
> > make[2]: *** [subdirs] Error 1
> > make[2]: Leaving directory `/usr/src/apache_1.3.12/src'
> > make[1]: *** [build-std] Error 2
> > make[1]: Leaving directory `/usr/src/apache_1.3.12'
> > make: *** [build] Error 2
> >
> > Which is because (in Europe) we apparently need to disable idea
> > encryption.  During the openssl build I specified no-idea, which is
> > I guess the root cause of this problem.
> >
> > Perusing the various files and docs I cannot find a reference to how
> > to fix this but I can think of various ways to get around this.
> >
> > 1. Why is idea turned off in Europe ?
> > Is it legal to compile it in ?
> >
> > 2. Would it be OK to simply copy the missing file (idea.h) and make
> > regardless ?  Again, would this be legal/sound ?
> >
> > 3. Are there any directives I need to add (to an already quite
> > substantial list of options!) to avoid this problem ?
> >
> > Any comments, thoughts, experiences etc. gratefully received.
> >
> > If you want a full transcript of the commands I used I will post my best
> > recollection of them (as I say I tried various combinations and will
> > document the one that _works_ and, if anyone is interested, post it here
> > :-).
> > Pretty much everything was installed in /usr/local/...
> >
> > TIA for your time and trouble,
> > cheers,
> >Andy.
> >
> >
> > __
> > Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
> > User Support Mailing List  [EMAIL PROTECTED]
> > Automated List Manager[EMAIL PROTECTED]
> __
> Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
> User Support Mailing List  [EMAIL PROTECTED]
> Automated List Manager[EMAIL PROTECTED]

__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: Compiling apache+mod_ssl+php3 in UK/Europe ... RedHat 6.1?

2000-03-07 Thread Andy Hughes

Hi Tim,
thanks for the feedback ... it's been pretty quiet so far!

> The whole thing ... apache 1.3.12, the newest mod_ssl, newest mod_perl
> and php compiled nicely for me in Red Hat 5.2.
> ...
> Question: should all this compile out of the box on a Red Hat 6.1 box
> as well, like on my Red Hat 5.2 box?
> I really hope so ... I dread using the rpm's.

I would guess so, my problem (I think) is that I need to tell the make for
Apache not to include idea (or allow it to compile in and hope it doesn't
use it or build it in if that is legal or ... etc etc etc you get the idea
(sic)).

I am sure that I could build an "out of the box" Apache if I accepted all
the defaults the trouble here is that I can't use the defaults
(  Hence my request for experiences from successful builders of
apache+ssl+php under Red Hat 6.x in the UK or Europe (come on guys and gals,
*someone* must have successfully done this!!!).

Althought I am comfortable with Apache, Red Hat and PHP I know *VERY* little
about ssl and security (beyond basic concepts anyway) and this is my first
crack at building a secure server using source tarballs and so far it has
been pretty taumatic.

Any useful references would also be appreciated.

Thanks again,
cheers,
   Andy.


__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



RE: Compiling apache+mod_ssl+php3 in UK/Europe ... RedHat 6.1?

2000-03-07 Thread GOMEZ Henri

>hello ...
>
>The whole thing ... apache 1.3.12, the newest mod_ssl, newest 
>mod_perl and php compiled nicely for me in Red
>Hat 5.2. The only bug I had was the php/database support ... 
>but this list is not about that :-))
>
>Question: should all this compile out of the box on a Red Hat 
>6.1 box as well, like on my Red Hat 5.2 box? I
>really hope so ... I dread using the rpm's. 

If you go to http://www.modssl.org/contrib/ you'll find
RPM (source and binaries) for apache-1.3.12 + mod_ssl 2.6.2.
Also you could find RPM for mod_jserv and so on.

These RPM are built for Redhat 6.x but you can rebuild the source
RPM on your old Redhat 5.2 boxes .

RH 5.2 complains about GLIBC 2.1 dependencies since it is 
GLIBC 2.0 based. 


Regards
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]



Re: Compiling apache+mod_ssl+php3 in UK/Europe ... RedHat 6.1?

2000-03-06 Thread tim


hello ...

The whole thing ... apache 1.3.12, the newest mod_ssl, newest mod_perl and php 
compiled nicely for me in Red
Hat 5.2. The only bug I had was the php/database support ... but this list is not 
about that :-))

Question: should all this compile out of the box on a Red Hat 6.1 box as well, like on 
my Red Hat 5.2 box? I
really hope so ... I dread using the rpm's. 

tim

p.s. my rh box -- www.priroda.xs4all.nl 


On Mon, Mar 06, 2000 at 04:22:52PM -, Andy Hughes wrote:
> Hello all,
> I've been trying without success to build an apache server that incorporates
> both mod_ssl and php.
> I am getting stuck and repeatedly trip up on detail - if anyone has built
> this within the UK, with all the UK-specific settings I would greatly
> appreciate any guidance!
> 
> If anyone can help here is my sorry tale ... this is a bit long so please
> accept my apologies in advance.
> 
> Hardware/OS: RedHat Linux 6.1 on an HP E60 server.
> 
> Using the following source trees:
> 
> /usr/src/apache_1.3.12
> /usr/src/mm-1.0.12
> /usr/src/mod_ssl-2.6.1-1.3.12
> /usr/src/openssl-0.9.5
> /usr/src/php-3.0.15
> 
> In addition I have MySQL 3.22.32 installed and working in /usr/local/mysql.
> 
> Combining advice from the mod_ssl, openssl and php documentation I tried
> several times to do the various builds.
> The last attempt (last week, it's taken me this long to calm down :-) which
> got closest gave me the following error:
> 
> 
> 
> I'm mostly there but towards the end when "make"-ing Apache I get:
> 
> <=== src/modules/standard
> ===> src/modules/ssl
> gcc -c  -I../../os/unix -I../../include   -DLINUX=2 -DMOD_SSL=206101
> -DUSE_HSREG
> EX -DEAPI -DUSE_EXPAT -I../../lib/expat-lite `../../apaci` -fpic
> -DSHARED_MODULE
>  -DSSL_COMPAT -DSSL_USE_SDBM -I/usr/local/ssl/include
> -DMOD_SSL_VERSION=\"2.6.1\
> " mod_ssl.c && mv mod_ssl.o mod_ssl.lo
> In file included from /usr/local/ssl/include/openssl/pem.h:66,
>  from /usr/local/ssl/include/openssl/ssl.h:147,
>  from mod_ssl.h:96,
>  from mod_ssl.c:65:
> /usr/local/ssl/include/openssl/evp.h:97: openssl/idea.h: No such file
> or directory
> make[4]: *** [mod_ssl.lo] Error 1
> make[3]: *** [all] Error 1
> make[2]: *** [subdirs] Error 1
> make[2]: Leaving directory `/usr/src/apache_1.3.12/src'
> make[1]: *** [build-std] Error 2
> make[1]: Leaving directory `/usr/src/apache_1.3.12'
> make: *** [build] Error 2
> 
> Which is because (in Europe) we apparently need to disable idea
> encryption.  During the openssl build I specified no-idea, which is
> I guess the root cause of this problem.
> 
> Perusing the various files and docs I cannot find a reference to how
> to fix this but I can think of various ways to get around this.
> 
> 1. Why is idea turned off in Europe ?
> Is it legal to compile it in ?
> 
> 2. Would it be OK to simply copy the missing file (idea.h) and make
> regardless ?  Again, would this be legal/sound ?
> 
> 3. Are there any directives I need to add (to an already quite
> substantial list of options!) to avoid this problem ?
> 
> Any comments, thoughts, experiences etc. gratefully received.
> 
> If you want a full transcript of the commands I used I will post my best
> recollection of them (as I say I tried various combinations and will
> document the one that _works_ and, if anyone is interested, post it here
> :-).
> Pretty much everything was installed in /usr/local/...
> 
> TIA for your time and trouble,
> cheers,
>Andy.
> 
> 
> __
> Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
> User Support Mailing List  [EMAIL PROTECTED]
> Automated List Manager[EMAIL PROTECTED]
__
Apache Interface to OpenSSL (mod_ssl)   www.modssl.org
User Support Mailing List  [EMAIL PROTECTED]
Automated List Manager[EMAIL PROTECTED]