Re: [users@httpd] mod ssl

2014-04-14 Thread John Iliffe
On Sunday 13 April 2014 21:32:12 Nick Kew wrote: > On 14 Apr 2014, at 00:34, John Iliffe wrote: > > Here I am assuming that you are not using the O/S supplied OpenSSL > > version and that you are either updating Apache or don't have OpenSSL > > linked dynamically. > Nick: I'm not trying to be a p

Re: [users@httpd] mod ssl

2014-04-14 Thread Rainer M. Canavan
On Apr 14, 2014, at 01:34 , John Iliffe wrote: > The library (found in the OpenSSL installation > directory in the /bin/ subdirectory) must be copied to the SYSTEM's library > directory. Don't do that. Re-Build apache with LDFLAGS=-Wl,-rpath,/path/to/new/openssl You can check if the RPATH

Re: [users@httpd] mod ssl

2014-04-13 Thread Nick Kew
On 14 Apr 2014, at 00:34, John Iliffe wrote: > Here I am assuming that you are not using the O/S supplied OpenSSL version > and that you are either updating Apache or don't have OpenSSL linked > dynamically. Aren't those assumptions alone sufficiently unusual (even idiosyncratic) to take you b

Re: [users@httpd] mod ssl

2014-04-13 Thread Jeff Trawick
On Sun, Apr 13, 2014 at 8:01 PM, John Iliffe wrote: > On Sunday 13 April 2014 19:44:11 Jeff Trawick wrote: > > On Sun, Apr 13, 2014 at 7:34 PM, John Iliffe > wrote: > > > Well, after a weekend of absolute frustration I figured this one out. > > > > > > Because there is a paucity of documentation

Re: [users@httpd] mod ssl

2014-04-13 Thread John Iliffe
On Sunday 13 April 2014 19:44:11 Jeff Trawick wrote: > On Sun, Apr 13, 2014 at 7:34 PM, John Iliffe wrote: > > Well, after a weekend of absolute frustration I figured this one out. > > > > Because there is a paucity of documentation and given the importance > > of OpenSSL to the Apache community,

Re: [users@httpd] mod ssl

2014-04-13 Thread Jeff Trawick
On Sun, Apr 13, 2014 at 7:34 PM, John Iliffe wrote: > Well, after a weekend of absolute frustration I figured this one out. > > Because there is a paucity of documentation and given the importance of > OpenSSL to the Apache community, I will give a full explanation as to what > happened and why,

Re: [users@httpd] mod ssl

2014-04-13 Thread John Iliffe
Well, after a weekend of absolute frustration I figured this one out. Because there is a paucity of documentation and given the importance of OpenSSL to the Apache community, I will give a full explanation as to what happened and why, and I hope that the Apache maintainers will be interested i

Re: [users@httpd] mod ssl

2014-04-12 Thread John Iliffe
Thanks Didier. I ran ldd and openssl/libssl doesn't show up in either the version of Apache that is running (2.4.3) or the new version 2.4.9. I checked the error log for the last restart as suggested by Katherine Manfre on this list and the running version reports: OpenSSL/1.0.0-FIPS. The

Re: [users@httpd] mod ssl

2014-04-11 Thread Didier Spaier
On 12/04/2014 03:40, John Iliffe wrote: I am compiling Apache-2.4.9 from source with the new openssl 1.0.1g. So far everything looks good EXCEPT that Apache won't start. After making a number of tweaks to the configuration, I'm stuck. The error from httpd -t is: httpd: Syntax error on line 13

[users@httpd] mod ssl

2014-04-11 Thread John Iliffe
I am compiling Apache-2.4.9 from source with the new openssl 1.0.1g. So far everything looks good EXCEPT that Apache won't start. After making a number of tweaks to the configuration, I'm stuck. The error from httpd -t is: httpd: Syntax error on line 130 of /usr/apache-2.4.9/conf/httpd.con