Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 31 May 2015 09:29:58 -0400
From:      Adam McDougall <mcdouga9@egr.msu.edu>
To:        ports@freebsd.org
Subject:   Fwd: Re: svn commit: r386904 - in head/www/apache22: . files
Message-ID:  <20150531132958.GB1034@egr.msu.edu>

next in thread | raw e-mail | index | archive | help

--yNb1oOkm5a9FJOVX
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Is anyone else getting this issue?  I had to revert the change on my systems.
Thanks.

--yNb1oOkm5a9FJOVX
Content-Type: message/rfc822
Content-Disposition: inline

BCC: heckendorfc@gmail.com
Message-ID: <55629533.9070106@egr.msu.edu>
Date: Sun, 24 May 2015 23:21:23 -0400
From: Adam McDougall <mcdouga9@egr.msu.edu>
User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0
MIME-Version: 1.0
To: Ryan Steinmetz <zi@FreeBSD.org>
Subject: Re: svn commit: r386904 - in head/www/apache22: . files
References: <201505210213.t4L2D8Fp059579@svn.freebsd.org>
In-Reply-To: <201505210213.t4L2D8Fp059579@svn.freebsd.org>
Content-Type: text/plain; charset=windows-1252
Content-Transfer-Encoding: 7bit

On 05/20/2015 22:13, Ryan Steinmetz wrote:
> Author: zi
> Date: Thu May 21 02:13:07 2015
> New Revision: 386904
> URL: https://svnweb.freebsd.org/changeset/ports/386904
> 
> Log:
>   - Generate new DH params during build to mitigate Logjam attack
>   - Fix deprecated USE_AUTOTOOLS
>   - Bump PORTREVISION
>   
>   With hat:	ports-secteam
>   Obtained from:	Winni Neessen
> 
> Added:
>   head/www/apache22/files/patch-modules_ssl_ssl__engine__dh.c   (contents, props changed)
> Modified:
>   head/www/apache22/Makefile

Hello,

When I try to start apache I get:

Performing sanity check on apache22 configuration:
httpd: Syntax error on line 112 of /usr/local/etc/apache22/httpd.conf:
Cannot load /usr/local/libexec/apache22/mod_ssl.so into server:
/usr/local/libexec/apache22/mod_ssl.so: Undefined symbol "get_dh2048"

I am using libressl but to me it looks like get_dh2048 and get_dh3072
are not in httpd-2.2.29/modules/ssl/ssl_engine_dh.c.  Is this patch
incomplete?  Thanks for any help.

--yNb1oOkm5a9FJOVX--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150531132958.GB1034>