apache broken after fixing openssh

From: Chris Hoogendyk (choogend_at_library.umass.edu)
Date: 03/29/04

  • Next message: Rohit Gupta: "Bind 8.3.3 on Solaris 9"
    Date: Mon, 29 Mar 2004 15:43:38 -0500
    To: Sun Managers <sunmanagers@sunmanagers.org>
    
    

    I had a problem from doing patches that broke ssh on an E250 with
    Solaris 8. I fixed ssh by installing openssl-0.9.7d and openssh-3.8p1 as
    packages from Sunfreeware (patch 112438-01, and tcp_wrappers were
    already in). Because of the history of this server, I had some
    difficulty getting sshd starting up and running. I had done a pkgrm of
    the slightly older versions of openssl and openssh before doing the
    install, but I still had to remove some old stuff and rewrite the
    startup script. So, that's working now. Have used scp, sftp, ssh both
    into and out of this server and once again closed off the insecure
    alternatives.

    However, I was making a change in httpd.conf (apache 1.3.27 as a package
    from Sunfreeware), and fortunately I did an apachectl configtest before
    restarting it.

    I'm getting the following error:

       /usr/local/apache# ./bin/apachectl configtest

       Syntax error on line 241 of /usr/local/apache/conf/httpd.conf:
       Can't locate API module structure `ssl_module' in file
       /usr/local/apache/libexec/libssl.so: ld.so.1:
       /usr/local/apache/bin/httpd: fatal: ssl_module:
       can't find symbol

    I removed the references to 0.9.6 in the libexec directory and copied
    the 0.9.7 items in (from /usr/local/ssl/lib):

    /usr/local/apache# ls -l libexec
    total 9408
    -rw-r--r-- 1 bin bin 1941040 Mar 18 02:59 libcrypto.a
    lrwxrwxrwx 1 root other 14 Mar 29 13:59 libcrypto.so ->
    libcrypto.so.0
    lrwxrwxrwx 1 root other 18 Mar 29 13:59 libcrypto.so.0 ->
    libcrypto.so.0.9.7
    -r-xr-xr-x 1 bin bin 1323604 Mar 18 02:59 libcrypto.so.0.9.7
    -rw-r--r-- 1 bin bin 300128 Mar 18 02:59 libssl.a
    lrwxrwxrwx 1 root other 11 Mar 29 14:00 libssl.so ->
    libssl.so.0
    lrwxrwxrwx 1 root other 15 Mar 29 14:00 libssl.so.0 ->
    libssl.so.0.9.7
    -r-xr-xr-x 1 bin bin 235252 Mar 18 02:59 libssl.so.0.9.7

    I am concerned that I can't find a mod_ssl.c anywhere, even though the
    httpd.conf has an addmodule mod_ssl.c, however, it was working before
    with openssl-0.9.6.

    I don't find any references to 0.9.6 in the httpd.conf. It referrs to
    the libssl.so which is symlinked.

    I probably ought to be able to work this out, but I'm under pressure
    with a bunch of other pieces of a project to complete and could use some
    quick pointers.

    ---------------

    Chris Hoogendyk

    -
        O__ ---- Network Specialist & Unix Systems Administrator
       c/ /'_ --- Library Information Systems & Technology Services
      (*) \(*) -- W.E.B. Du Bois Library
    ~~~~~~~~~~ - University of Massachusetts, Amherst

    <choogend@library.umass.edu>

    ---------------
    _______________________________________________
    sunmanagers mailing list
    sunmanagers@sunmanagers.org
    http://www.sunmanagers.org/mailman/listinfo/sunmanagers


  • Next message: Rohit Gupta: "Bind 8.3.3 on Solaris 9"

    Relevant Pages

    • Re: Building 2.6.10 kernel for Debian and ncurses
      ... >> packages which are already installed and work fine. ... >sourceforge.net for available chroot tools for SSH. ... account not unlike the concept of anonymous login for ftp. ... although the end users have to enter user IDs and passwords ...
      (comp.os.linux.setup)
    • Re: Mksysb failed
      ... With the innstallation of the ML04 the ssh is now in the direcotry... ... Senior Technology Consultant ... I just installed ssh for AIX 5.1 and I've rebooted the server. ... By the way I'm installing ML04 in this server, that's why I was backing it ...
      (AIX-L)
    • dpkg error after upgrade
      ... Preconfiguring packages ... ... Unpacking replacement ssh ... ... Unpacking replacement xlibmesa3 ... ... Rerunning upgrading gives the same. ...
      (Debian-User)
    • Re: Building 2.6.10 kernel for Debian and ncurses
      ... >>install it. ... > packages which are already installed and work fine. ... I highly recommend Richard Silverman's book on SSH, ... securely exchange files without shell access, ...
      (comp.os.linux.setup)
    • Re: IRIX ssh
      ... >> ssh is slow. ... >> I'll leave this one to cosmos. ... Pls start to install fw_openssl first and the missing packages. ...
      (comp.sys.sgi.misc)