Recompiled openssl but mod_ssl.so seems to reference old version

General support questions
Post Reply
ofero
Posts: 3
Joined: 2018/02/21 11:48:56

Recompiled openssl but mod_ssl.so seems to reference old version

Post by ofero » 2018/02/21 13:03:04

Hi,

I have tried to download and compile a new version of openssl for centos

Code: Select all

wget https://www.openssl.org/source/openssl-1.0.2n.tar.gz
tar -zxf openssl-1.0.2n.tar.gz
cd openssl-1.0.2n
./config --prefix=/usr/local/openssl --openssldir=/usr/local/openssl shared
make
make test
make install
I then created a file /etc/profile.d/openssl.sh with the content

Code: Select all

pathmunge /usr/local/openssl/bin
when I log in again and run openssl version I get

Code: Select all

# openssl version
OpenSSL 1.0.2n  7 Dec 2017
But it seems the apache httpd mod_ssl library is still referencing the previous version of openssl.

Code: Select all

# strings /etc/httpd/modules/mod_ssl.so | grep OpenSSL
This version of OpenSSL does not have any compression methods available, cannot enable SSLCompression.
OpenSSL 1.0.2k  26 Jan 2017
OpenSSL
AH01894: Unable to initialize TLS servername extension callback (incompatible OpenSSL version?)
AH01913: Unable to initialize TLS session ticket key callback (incompatible OpenSSL version?)
OpenSSL 1.0.2k  26 Jan 2017
How do I make apache mod_ssl use my newly compiled openssl ?

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Recompiled openssl but mod_ssl.so seems to reference old version

Post by TrevorH » 2018/02/21 16:03:56

Don't.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply