ERR_GET_FUNC was blocking this for me on FreeBSD 13 with OpenSSL 3.0 from ports. Warning in build logs, but failure at runtime
ssl_engine_init.c:1375:22: warning: implicit declaration of function 'ERR_GET_FUNC' is invalid in C99 [-Wimplicit-function-declaration] && (ERR_GET_FUNC(ERR_peek_last_error()) and the fix is https://svn.apache.org/viewvc?view=revision&revision=1891138 as noted above. All seems well with that r1891138 fix and OpenSSL 3.0.0 on FreeBSD 13.0-p4 amd64 / clang 11.0.1 [Sun Sep 12 11:48:50.820341 2021] [mpm_event:notice] [pid 80970:tid 34372395008] AH00489: Apache/2.4.49 (FreeBSD) OpenSSL/3.0.0 configured -- resuming normal operations On Sun, Sep 12, 2021 at 7:02 AM Dennis Clarke <dcla...@blastwave.org> wrote: > > On 9/12/21 02:36, Dennis Clarke wrote: > > On 9/10/21 11:23, ste...@eissing.org wrote: > >> Hi, all; > >> Please find below the proposed release tarball and signatures: > >> https://dist.apache.org/repos/dist/dev/httpd/ > >> > >> I would like to call a VOTE over the next few days to release > >> this candidate tarball httpd-2.4.49-rc1 as 2.4.49: > >> [ ] +1: It's not just good, it's good enough! > >> [ ] +0: Let's have a talk. > >> [ ] -1: There's trouble in paradise. Here's what's wrong. > >> > > * * * NOTE -1 There's trouble in paradise. Here's what's wrong. * * * > > > Reply to self here ... > > I discovered in the OpenSSL 3.0.0 release notes: > > > * The ERR_GET_FUNC() function was removed. With the loss > of meaningful function codes, this function can only > cause problems for calling applications. > > Paul Dale > > > Thus ERR_GET_FUNC() was removed, but it looks like httpd is still > trying to use it, which explains the error I'm seeing. What I see > is : > > > > beta # > beta # /opt/bw/bin/httpd -V > Server version: Apache/2.4.49 (Unix) > Server built: Sep 12 2021 03:54:11 > Server's Module Magic Number: 20120211:116 > Server loaded: APR 1.7.0, APR-UTIL 1.6.1 > Compiled using: APR 1.7.0, APR-UTIL 1.6.1 > Architecture: 64-bit > Server MPM: event > threaded: yes (fixed thread count) > forked: yes (variable process count) > Server compiled with.... > -D APR_HAS_SENDFILE > -D APR_HAS_MMAP > -D APR_HAVE_IPV6 (IPv4-mapped addresses enabled) > -D APR_USE_PROC_PTHREAD_SERIALIZE > -D APR_USE_PTHREAD_SERIALIZE > -D SINGLE_LISTEN_UNSERIALIZED_ACCEPT > -D APR_HAS_OTHER_CHILD > -D AP_HAVE_RELIABLE_PIPED_LOGS > -D DYNAMIC_MODULE_LIMIT=256 > -D HTTPD_ROOT="/opt/bw" > -D SUEXEC_BIN="/opt/bw/bin/suexec" > -D DEFAULT_PIDLOG="var/apache/httpd/logs/httpd.pid" > -D DEFAULT_SCOREBOARD="logs/apache_runtime_status" > -D DEFAULT_ERRORLOG="logs/error_log" > -D AP_TYPES_CONFIG_FILE="etc/apache/httpd/mime.types" > -D SERVER_CONFIG_FILE="etc/apache/httpd/httpd.conf" > beta # > beta # > beta # /opt/bw/bin/apachectl start > httpd: Syntax error on line 75 of /opt/bw/etc/apache/httpd/httpd.conf: > Cannot load modules/mod_ssl.so into server: ld.so.1: httpd: fatal: > relocation error: file /opt/bw/modules/mod_ssl.so: symbol ERR_GET_FUNC: > referenced symbol not found > beta # > > We see https://github.com/apache/httpd/pull/258 exists however I am > only now looking at how to patch 2.4.49 based on those changes in > trunk. > > -- > Dennis Clarke > RISC-V/SPARC/PPC/ARM/CISC > UNIX and Linux spoken > GreyBeard and suspenders optional