Problem with Upgrading Apache to 2.2.22 with ssl - Apache Web Server forum at WebmasterWorld - WebmasterWorld

Forum Moderators: phranque

Message Too Old, No Replies

Problem with Upgrading Apache to 2.2.22 with ssl

Apache installation Error

sanjivus

7:09 pm on Mar 28, 2012 (gmt 0)

10+ Year Member

I have several systems running on RHEL 5.7 (32bit) with following:
Apache 2.2.21 with ssl enabled
OpenSSL 1.0.0e
Php5.3.6

I wanted to upgrade to:
Apache 2.2.22 with ssl enabled
OpenSSL 1.0.1
Php5.3.10

I ahave done the following:

#OpenSLL installation (default location /usr/local/ssl)
./config
make
make test
make install
#Apache Install
./configure \
--with-ssl=/usr/local/ssl \
--enable-ssl \
--enable-modules="all" \
--enable-mods-shared="most" \

# I am getting the following error:

checking whether to enable mod_ssl... checking dependencies
checking for SSL/TLS toolkit base... /usr/local/ssl
adding "-I/usr/local/ssl/include" to CPPFLAGS
adding "-I/usr/local/ssl/include" to INCLUDES
adding "-L/usr/local/ssl/lib" to LDFLAGS
checking for OpenSSL version... checking openssl/opensslv.h usability... yes
checking openssl/opensslv.h presence... yes
checking for openssl/opensslv.h... yes
checking openssl/ssl.h usability... yes
checking openssl/ssl.h presence... yes
checking for openssl/ssl.h... yes
OK
forcing SSL_LIBS to "-lssl -lcrypto "
adding "-lssl" to LIBS
adding "-lcrypto" to LIBS
checking openssl/engine.h usability... yes
checking openssl/engine.h presence... yes
checking for openssl/engine.h... yes
checking for SSLeay_version... yes
checking for SSL_CTX_new... no
checking for ENGINE_init... no
checking for ENGINE_load_builtin_engines... no
checking for SSL_set_cert_store... no
configure: error: ... Error, SSL/TLS libraries were missing or unusable

Please help.

enigma1

10:13 am on Mar 29, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Is there a config.log file and what it says?

sanjivus

11:01 pm on Mar 29, 2012 (gmt 0)

10+ Year Member

Appreciate your response. sorry about the delayd response, I was busy to find the solution. I tried several different things but nothing is working. Here is the config.log file. I am getting the error message that the post is too large. I am going to paste it in parts.

sanjivus

11:07 pm on Mar 29, 2012 (gmt 0)

10+ Year Member

My config file is 36 pages long. This portal does not allow me to paste all the text and there is no way to attach the text file. Id there any way that I can email this file to you?

sanjivus

6:23 pm on Apr 2, 2012 (gmt 0)

10+ Year Member

come on, I am sure there are many apache gurus gone thru this...!

enigma1

6:28 pm on Apr 2, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

it's strange, are you receiving notifications from this forum on PMs or not?

sanjivus

8:50 pm on Apr 2, 2012 (gmt 0)

10+ Year Member

sorry, I did not see the PM. I just sent you the config.log file.

sanjivus

3:45 am on Apr 3, 2012 (gmt 0)

10+ Year Member

I wanted to provide some more info:
Same install script works with
OpenSSL-1.0.0e
OpenSSL-1.0.0f
OpenSSL-1.0.0g
But I get the same error with OpenSSL-1.0.0h and OpenSSL-1.0.1.

So I was able to upgrade from httpd-2.2.21/OpenSSL-1.0.0e to httpd-2.2.22/OpenSSL-1.0.0g. I would like to upgrade to OpenSSL-1.0.1

enigma1

7:45 am on Apr 3, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Looks like the openssl library is the problem. I see in the log

dso_dlfcn.c:(.text+0x2d): undefined reference to `dlopen'
dso_dlfcn.c:(.text+0x43): undefined reference to `dlsym'
dso_dlfcn.c:(.text+0x4d): undefined reference to `dlclose'
/usr/local/ssl/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_pathbyaddr':
dso_dlfcn.c:(.text+0x8f): undefined reference to `dladdr'
dso_dlfcn.c:(.text+0xe8): undefined reference to `dlerror'
/usr/local/ssl/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_func':
dso_dlfcn.c:(.text+0x43d): undefined reference to `dlsym'
dso_dlfcn.c:(.text+0x514): undefined reference to `dlerror'
/usr/local/ssl/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_bind_var':
dso_dlfcn.c:(.text+0x5a1): undefined reference to `dlsym'
dso_dlfcn.c:(.text+0x67d): undefined reference to `dlerror'
/usr/local/ssl/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_unload':
dso_dlfcn.c:(.text+0x6e3): undefined reference to `dlclose'
/usr/local/ssl/lib/libcrypto.a(dso_dlfcn.o): In function `dlfcn_load':
dso_dlfcn.c:(.text+0x7b7): undefined reference to `dlopen'
dso_dlfcn.c:(.text+0x828): undefined reference to `dlclose'
dso_dlfcn.c:(.text+0x86d): undefined reference to `dlerror'
collect2: ld returned 1 exit status

So something is wrong with the LIBS argument that you setup.

sanjivus

2:29 pm on Apr 3, 2012 (gmt 0)

10+ Year Member

Thanks for taking a look at the log file.

I am not really sure what I am doing wrong. I am using the same script to install OpenSSL as well as Apache. As I mentioned earlier that things went fine with OpenSSL-1.0.0e, OpenSSL-1.0.0f and OpenSSL-1.0.0g. This problem started to appear with OpenSSL-1.0.0h and OpenSSL-1.0.1.

Same thing is happening on around 10+ servers.
Any further steps to troubleshoot/fix would be much appreciated.

enigma1

3:31 pm on Apr 3, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

seems the openssl you use seems has a dependency on the libdl, so see if it builds by setting LIBS=-ldl

sanjivus

5:25 pm on Apr 3, 2012 (gmt 0)

10+ Year Member

Thanks again for the reply.

I am sorry, I am not clear about what you are trying to say. Are you saying that I should try to build OpenSSL with LIBS=-ldl or with httpd. I tried with both and i got the following responses.

[root@indb2 openssl-1.0.0h]> ./config --LIBS=-ldl
Operating system: i686-whatever-linux2
Configuring for linux-elf
Usage: .......

[root@indb2 httpd-2.2.22]> ./configure --with-ssl=/usr/local/ssl --enable-ssl --enable-modules="all" --enable-mods-shared="most" --LIBS=-ldl
configure: error: unrecognized option: `--LIBS=-ldl'
Try `./configure --help' for more information.

enigma1

6:58 pm on Apr 3, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

that's for the httpd to be built with libdl

env LDFLAGS="-ldl" ./configure --with-ssl=/usr/local/ssl --enable-ssl --enable-modules="all" --enable-mods-shared="most"

what happens if you try to configure with the above?

sanjivus

6:29 pm on Apr 4, 2012 (gmt 0)

10+ Year Member

That did the trick. You are a genius my friend.
Can you please explain what really happened?

enigma1

8:24 am on Apr 5, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

There are functions in libdl used for dynamic linking and it was required to be present from the logs. It may not be the only problem though. You have to check the functionality of the apache you just built.

sanjivus

2:52 pm on Apr 5, 2012 (gmt 0)

10+ Year Member

So far everything is working fine. Is there anything specific you want me to test/check?

enigma1

4:21 pm on Apr 5, 2012 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Ok it's possible that everything works just keep an eye in the server logs.

sanjivus

7:07 pm on Apr 5, 2012 (gmt 0)

10+ Year Member

Thanks, appreciate your valuable help. I will let you know if anything is wrong.