[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[cobalt-developers] openssl patch



Attention! Read completely before starting this.
This comes with no warranty!
Do it on your own risk!

Ok, I succeeded , what I did was (on a RaQ4r):

downloading the new openssl-engine-0.9.6g (www.openssl.org)
downloaded the sources for my old apache version 1.3.12 (httpd.apache.org) downloaded the sources for the old mod_ssl 2.6.6-1.3.12 (www.mod_ssl.org)

compiled a version linked to the new openssl engine by
( in a suitable directory)
untar apache-1.3.12
untar openssl-engine-0.9.6g
untar mod_ssl-2.6.6-1.3.12

cd mod_ssl

./configure --with-apache=../apache_1.3.12/ \
		--with-apxs=/usr/sbin/apxs \
		--with-ssl=../openssl-engine-0.9.6g

make

go into pkg.sslmod and
cp libssl.so /etc/httpd/modules/

Restarting apache with /etc/rc.d/init.d/httpd stop /start
didn't work. I got an error in the error logfile and apache didn't
start.
[Mon Sep 16 13:31:01 2002] [crit] (98)Address already in use: make_sock: could not bind to address xxxxx port 443

Typing reboot rebooted the machine but without sshd started.
(That was when the really hard sweating began.)
The GUI was working so I opened telnet and started sshd manually.

I don't know yet why the sshd didn't start automatically like usual.

What I also found was that for some reasons there were two entries of LoadModule ssl_mod in
/etc/httpd/conf/httpd.conf. I commented one of them out.

If you didn't understand what this was all about then please don't try it!

- Gerrit