> -----Original Message-----
> From: Aage J. Skjolingstad [mailto:[EMAIL PROTECTED]]
> Sent: 06 April 2001 01:06
> To: [EMAIL PROTECTED]
> Subject: Re: Apache mod_ssl and openssl - I messed up
>
>
> Hi John,
>
> I removed several of the packages and forced new installation
> of opensll
> and reinstalled mod_ssl.
>
> It is working now - kind of - still httpd dies though when
> I'm using the
> -HUP command twice consecutively; - one time is OK though - has to do
> with this "children things" - I believe.
>
> Something is not correct between RH 7.0 - Apache 1.3.14 and
> mod_sll. If
> I remove mod_sll and hatch out the command lines in httpd.conf - the
> server operates and rotates the logs without any problems.
>
> Regards,
>
> Aage J. Skjolingstad
>
That's good to hear. Under RedHat, I usually use
/etc/rc.d/init.d/httpd restart
Rather than sending a -HUP or using apachectl. It works fine for me. Of
course, I only ever restart if
1. I've added or removed ssl virtual hosts in my configuration
2. I'm testing an SSL acceleration card, ie adding or removing
"SSLCryptodevice ..."
3. I'm moving log files. I usually stop the server, move the log files out
and start the server. It takes about 20 seconds each time. I believe there
is another way to do this, but moving files whilst they are being written to
kind of scares me...
RedHat made some BIG mistakes with bringing out RedHat 7.0, here's a few to
be going on with:
1. Most of their packages on their contrib site now require the 2.2 version
glibc libraries that comes with RedHat 7.0.
2. The gcc compiler isn't backwards compatible with any other version of
Redhat or Linux.
3. They used a version of Apache-mod_ssl and openssl that was already out of
date when Redhat 7.0 launched!
No wonder Linus slated it. To add to this, they recently messed up the
kernel-headers for the latest kernel for RedHat 6.2 (ie they combined them
with the kernel-source package without announcing it). I think this is why I
can't compile the Cryptoswift module for the new SMP kernel. I therefore
cannot test this SSL acceleration card under the new kernel.
Personally, I'm waiting till Redhat 7.1 or later comes out. Even then, I'll
be hoping that they are changing their compiler version.
-
John Airey
Internet Systems Support Officer, ITCSD, Royal National Institute for the
Blind,
Bakewell Road, Peterborough PE2 6XU,
Tel.: +44 (0) 1733 375299 Fax: +44 (0) 1733 370848 [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl) www.modssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]