I am running Red Hat Linux version 7.2, Apache version 2.4.6, Java JDK 
1.8.0_65, Tomcat version 9.0.0.M1, Tomcat connector version 1.2.5, and have 
uncommented the HTTP/2 Connector lines in the Tomcat server.xml file.  When I 
run the configure command for the Tomcat connector, I get the message:

checking OpenSSL library version >= 1.0.2...



Found   OPENSSL_VERSION_NUMBER 0x1000105f (OpenSSL 1.0.1e 11 Feb 2013)

Require OPENSSL_VERSION_NUMBER 0x1000200f or greater (1.0.2)



Per Red Hat (https://access.redhat.com/articles/1384453), they consider OpenSSL 
version 1.0.2 to have security issues, and so are not issuing that version.



To be able to configure and make the tcnative library, I run the configure 
command as such:

 ./configure --with-apr=/usr/bin/apr-1-config --with-java-home=$JAVA_HOME 
--prefix=$CATALINA_HOME --disable-openssl-version-check --with-ssl=yes



I am able to make and install the library, but when I run the Tomcat configtest 
I get:

INFO: Initializing ProtocolHandler ["https-apr-8443"]

/usr/java/jdk1.8.0_65/bin/java: symbol lookup error: 
/home/tomcat/apache-tomcat-9.0.0.M1-src/output/build/lib/libtcnative-1.so.0.2.5:
 undefined symbol: SSL_CTX_set_alpn_select_cb

Configuration error detected!



Is there a way to get around or define this symbol?

Should I investigate the use of older versions of Tomcat, Java, and Tomcat 
connector?

Should I not use APR with Tomcat (and then use HTTP/1.1)?

Should I abandon the RedHat Apache software and use the latest Apache from 
apache.org?



Thanks,

Mike


Reply via email to