Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 09 Apr 2014 00:07:18 +0200
From:      olli hauer <ohauer@gmx.de>
To:        apache@FreeBSD.org
Cc:        Philip Jocks <pjlists@netzkommune.de>
Subject:   Re: www/apache22 not honoring WITH_OPENSSL_PORT=yes under FreeBSD 10?
Message-ID:  <53447316.6090301@gmx.de>
In-Reply-To: <AC24A576-FD0B-4FEA-AF00-4FD884F80C9E@netzkommune.de>
References:  <F6D91E2D-A001-4B15-B37C-3DA223AB111C@netzkommune.de> <53446581.7070802@gmx.de> <AC24A576-FD0B-4FEA-AF00-4FD884F80C9E@netzkommune.de>

next in thread | previous in thread | raw e-mail | index | archive | help
On 2014-04-08 23:55, Philip Jocks wrote:
> 
> Am 08.04.2014 um 23:09 schrieb olli hauer <ohauer@gmx.de>:
> 
>> On 2014-04-08 17:58, Philip Jocks wrote:
>>> Hej,
>>>
>>> I just came across this: When building in a fresh jail, mod_ssl.so is linked against the base libraries instead of those from ports:
>>>
>>> # ldd /var/ports/basejail/usr/ports/www/apache22/work/httpd-2.2.27/modules/ssl/.libs/mod_ssl.so
>>> /var/ports/basejail/usr/ports/www/apache22/work/httpd-2.2.27/modules/ssl/.libs/mod_ssl.so:
>>> 	libssl.so.7 => /usr/lib/libssl.so.7 (0x801630000)
>>> 	libcrypto.so.7 => /lib/libcrypto.so.7 (0x801899000)
>>> 	libcrypt.so.5 => /lib/libcrypt.so.5 (0x801c84000)
>>> 	libthr.so.3 => /lib/libthr.so.3 (0x801ea4000)
>>> 	libc.so.7 => /lib/libc.so.7 (0x80081d000)
>>>
>>> In an older FreeBSD 8.x jail it works as expected. A friend of mine confirmed with a fresh FreeBSD 10 VM.
>>> Am I missing something?
>>>
>>
>> Hi Philip,
> 
> Hi Olli,
> 
> thanks for getting back to me.
> 
>> have you also build devel/apr1 with 'WITH_OPENSSL_PORT=yes' in /etc/make.conf?
> 
> Yes, it's a fresh FreeBSD 10.0 jail and my friend tested with a fresh VM with same results.
> 
>> Here are some outputs from apu-1-config, build with OpenSSL from base / ports
>> so you can compare it with the output from apr-1-config on your system.
>>
>>
>> OpenSSL base:
>> =================
>> $> usr/local/bin/apu-1-config --includes
>> -I/usr/local/include/apr-1 -I/usr/include -I/usr/local/include -I/usr/local/include/db5
>>
>> /usr/local/bin/apu-1-config --ldflags
>> -L/usr/lib -L/usr/local/lib -L/usr/local/lib/db5
>>
>>
>> OpenSSL ports:
>> =================
>> $> /usr/local/bin/apu-1-config --includes
>> -I/usr/local/include/apr-1 -I/usr/local/include -I/usr/local/include/db5
>>
>> $> /usr/local/bin/apu-1-config --ldflags
>> -L/usr/local/lib -L/usr/local/lib/db5
> 
> mine also has /usr/include and /usr/lib appended:
> 
> # /usr/local/bin/apu-1-config --includes
>  -I/usr/local/include/apr-1 -I/usr/local/include -I/usr/local/include/db48 -I/usr/include
> 
> # /usr/local/bin/apu-1-config --ldflags
>  -L/usr/local/lib -L/usr/local/lib/db48 -L/usr/lib
> 
>>
>>
>> And also important '/usr/local/share/apr/build-1/apr_rules.mk'
>>
>> diff -nru base_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk ports_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk
>> --- base_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk   2014-04-08 23:00:48.000000000 +0200
>> +++ ports_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk  2014-04-08 23:00:46.000000000 +0200
>> @@ -42,8 +42,8 @@
>> # configure adds to them for tests, but we restore them at the end.
>> #
>> CFLAGS=-O2 -pipe -fno-strict-aliasing
>> -CPPFLAGS=-I/usr/include
>> -LDFLAGS= -L/usr/lib -Wl,-rpath,/usr/lib:/usr/local/lib
>> +CPPFLAGS=-I/usr/local/include -I/usr/local/include
>> +LDFLAGS= -L/usr/local/lib -Wl,-rpath,/usr/local/lib -L/usr/local/lib
>> LIBS=
>> DEFS=-DHAVE_CONFIG_H
>>
> 
> here I got:
> 
> CPPFLAGS=-I/usr/local/include
> LDFLAGS= -L/usr/local/lib -Wl,-rpath,/usr/local/lib
> 
> Can you make anything out of this?
> If you build www/apache22 on a fresh FreeBSD 10 box with "WITH_OPENSSL_PORT=yes", does it link to the port instead of base?
> 

Hi Philip,

give me some time, I have to cross check this on a 10 VM can take some time until all required port s are build ...

-- 
olli



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?53447316.6090301>