Re: mod_ssl help PLEASE! desperate!
Re: mod_ssl help PLEASE! desperate!
- Subject: Re: mod_ssl help PLEASE! desperate!
- From: Brian Hill <email@hidden>
- Date: Mon, 10 Sep 2001 15:45:18 -0500
On Monday, September 10, 2001, at 03:17 PM, Michael Sitarzewski wrote:
Here is some output... any ideas? I've been wrestling with this for
weeks now and am about to lose a pretty good client over it. :(
Any help is appreciated.
---
<=== src/modules
cc -c -I./os/unix -I./include -DDARWIN -DMOD_SSL=208104
-DUSE_HSREGEX -DEAPI -DUSE_EXPAT -I./lib/expat-lite -DNO_DL_NEEDED
`./apaci` modules.c
cc -c -I./os/unix -I./include -DDARWIN -DMOD_SSL=208104
-DUSE_HSREGEX -DEAPI -DUSE_EXPAT -I./lib/expat-lite -DNO_DL_NEEDED
`./apaci` buildmark.c
cc -DDARWIN -DMOD_SSL=208104 -DUSE_HSREGEX -DEAPI -DUSE_EXPAT
-I./lib/expat-lite -DNO_DL_NEEDED `./apaci`
-L/Users/michael/Software/apple/OpenSSL/openssl \
-o httpd buildmark.o modules.o modules/ssl/libssl.a
modules/standard/libstandard.a main/libmain.a ./os/unix/libos.a
ap/libap.a regex/libregex.a lib/expat-lite/libexpat.a -ldbm -lssl
-lcrypto
/usr/bin/ld: Undefined symbols:
_sk_new_null
_BIO_snprintf
make[2]: *** [target_static] Error 1
make[1]: *** [build-std] Error 2
make: *** [build] Error 2
I searched for sk_new_null on google, and discovered that this is due to
a version mismatch with OpenSSL.
I think that 0.9.5a is what's included on OSX (the libraries anyway).
If you're trying to build something with OpenSSL 0.9.6, you should
probably hide the older libcrypto and libssl libraries in your /usr/lib
folder from the compiler (I think you can do this in your Makefile by
specifying the library search paths). You shouldn't just delete them,
since many parts of OSX may rely on them. Alter the Makefile instead.
Here's the description of the solution from the OpenSSL mailing list:
What's happening is that when you built, you probably did that against
/usr/local/ssl/lib/lib{ssl,crypto}.so, but when you run, it wants to
link with /et/httpd/lib/apache/lib{ssl,crypto}.so, which are obviously
from a different (older, I'd say 0.9.5a) version, it breaks.
There are a few solutions for this:
- cp /usr/local/ssl/lib/lib{ssl,crypto}.so /et/httpd/lib/apache/
I personally would avoid this, because <deity of choice> only
knows what else depends o what's already there.
- Link Apache-ssl against OpenSSL-0.9.6 libraries statically.
For obvious reasons, I'd take the second choice. Less hassle that
way.
Brian
email@hidden
http://personalpages.tds.net/~brian_hill
___________________________________________________________
"Why? I came into this game for adventure - go anywhere, travel
light, get in, get out, wherever there's trouble, a man alone.
Now they've got the whole country sectioned off and you can't
move without a form. I'm the last of a breed."
-- Archibald "Harry" Tuttle, Rogue HVAC Repairman
___________________________________________________________