Hi,

I'm upgrading openssl on a number of servers and obviously this
involves re-compiling Apache. I am recompiling Apache using this line:

SSL_BASE=/workbench/openssl ./configure --prefix=/workbench/apache
--enable-module=ssl --enable-shared=ssl --enable-rule=SHARED_CORE
--enable-module=so

My question is how can you determine what compilation flags were used
when Apache was originally compiled?

Any is much appreciated,

Thanks,

Bob

On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> I'm upgrading openssl on a number of servers and obviously this
> involves re-compiling Apache.

Well... if your mod_ssl is using dynamic linking, it shouldn't be
necessary to recompile it, just upgrade the libraries.

> My question is how can you determine what compilation flags were used
> when Apache was originally compiled?

The only way is to check the configure log file, httpd -V will tell you
something, but not the whole list.

Davide

--
!07/11 PDP a ni deppart m'I !pleH

Hi,

Thanks for the quick reply.

How can I tell if mod_ssl is using dynamic linking?

Thanks again,

Bob

Davide Bianchi wrote:

> On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> > I'm upgrading openssl on a number of servers and obviously this
> > involves re-compiling Apache.
>
> Well... if your mod_ssl is using dynamic linking, it shouldn't be
> necessary to recompile it, just upgrade the libraries.
>
> > My question is how can you determine what compilation flags were used
> > when Apache was originally compiled?
>
> The only way is to check the configure log file, httpd -V will tell you
> something, but not the whole list.
>
> Davide
>
> --
> !07/11 PDP a ni deppart m'I !pleH

On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> How can I tell if mod_ssl is using dynamic linking?

ldd /where/is/mod_ssl.so

will show '/lib/ld-linux.so' if it's compiled with dynamic linking.

Davide

--
HAL 9000: Dave. Put down those Windows disks, Dave. DAVE!

Hi,

Thanks for the reply again.

I ran locate to try and find mod_ssl.so but it returned nothing. The
closest I have is libssl.so, and when I run ldd on it, it returns the
following:

libc.so.6 => /lib/libc.so.6 (0x400f8000)
/lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000)

Is that the correct file to be looking at? If so, it would seem that
dynamic linking has been used.

If that is the case, when you say there is no need to recompile it
(Apache?), just the libraries, do you mean just openssl?

Also, where can I find the configure log file that you originally
mentioned?

Thanks again,

Bob

Davide Bianchi wrote:

> On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> > How can I tell if mod_ssl is using dynamic linking?
>
> ldd /where/is/mod_ssl.so
>
> will show '/lib/ld-linux.so' if it's compiled with dynamic linking.
>
> Davide
>
> --
> HAL 9000: Dave. Put down those Windows disks, Dave. DAVE!

On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> I ran locate to try and find mod_ssl.so but it returned nothing.

Look in your httpd.conf (or wathever your configuration file is),
if there is a LoadModule then you know a) that the module is loaded
at runtime and b) where it is, if there isn't such line then the
module is probably compiled built-in, then you have to recompile it.

Davide

> Also, where can I find the configure log file that you originally
> mentioned?

If you still have it, is in the directory with the sources.
Davide

--
If at first you don't succeed, get a job with Microsoft.
-- Gareth Barnard

[ Davide Bianchi ]

> On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
>> I'm upgrading openssl on a number of servers and obviously this
>> involves re-compiling Apache.
>
> Well... if your mod_ssl is using dynamic linking, it shouldn't be
> necessary to recompile it, just upgrade the libraries.

A caveat to this should be "if the two versions are binary
compatible", and OpenSSL versions frequently aren't. My advice is also
to try upgrading before recompiling Apache, but be prepared to have to
recompile even though it might be a minor upgrade (say, from 0.9.7k to
0.9.7l).


Rgds,
Kenneth Svee

Hi Kenneth, Davide,

Many thanks for you replies.

Davide, is the configure log file called configure.status?

Kenneth, as far as I can tell, mod_ssl is using dynamic linking but is
there a way to tell if there are binary compatibility issues?

Finally, can I just confirm that we are talking about leaving Apache
and ModSSL alone and only changing OpenSSL?

Thanks to you both,

Bob

Kenneth Svee wrote:

> [ Davide Bianchi ]
>
> > On 2006-10-05, Bob <bobsaila@hotmail.co.uk> wrote:
> >> I'm upgrading openssl on a number of servers and obviously this
> >> involves re-compiling Apache.
> >
> > Well... if your mod_ssl is using dynamic linking, it shouldn't be
> > necessary to recompile it, just upgrade the libraries.
>
> A caveat to this should be "if the two versions are binary
> compatible", and OpenSSL versions frequently aren't. My advice is also
> to try upgrading before recompiling Apache, but be prepared to have to
> recompile even though it might be a minor upgrade (say, from 0.9.7k to
> 0.9.7l).
>
>
> Rgds,
> Kenneth Svee