David L. Zoll wrote:
On Wed, Oct 30, 2002 at 05:36:46PM +0100, Michael Bell wrote:

OK, I can do something along these lines (BTW, Debian installs its
openssl files alongside all the other packaged files:
/usr/bin/openssl, /usr/lib/libssl.so.0.9.6, etc).
Then the installation of 0.9.7 is really simple. Download an actual 0.9.7-beta or snapshot from OpenSSL. Compile it and install it. You can find all the new files in /usr/local/ssl and all your old applications don't see the new libs.

Hmm, I have one concern about this.  If mod-ssl is compiled with
0.9.6, and OpenCA Perl scripts use 0.9.7, and they occupy the same
process, you are likely to have a problem.  If I recall correctly,
this doesn't actually happen when using plain CGI, but mod-perl is on
the feature list for the next release, and I believe mod-perl does
load scripts up in the same process.  I don't know for sure that there
is a problem there, but it might be worth looking into.
There is a misunderstanding. First I exactly run my testinstallations in this mode (SuSE 7.3 with Apache with mod_perl and old mod_ssl and OpenCA with new OpenSSL). Second mod_perl load the code in the same process but this process was created when mod_perl was used for the first time. Mod_perl compile the script and re-use the compiled script if it possible. This process and the associated libs of apache has nothing to do with the script and we use the commandlinetools of OpenSSL and some compiled binaries via perls `command`-functionality.

So there is no problem to run an old apache with a new OpenCA.

Best regards

Michael
--
-------------------------------------------------------------------
Michael Bell Email (private): [EMAIL PROTECTED]
Rechenzentrum - Datacenter Email: [EMAIL PROTECTED]
Humboldt-University of Berlin Tel.: +49 (0)30-2093 2482
Unter den Linden 6 Fax: +49 (0)30-2093 2959
10099 Berlin
Germany http://www.openca.org



-------------------------------------------------------
This sf.net email is sponsored by: Influence the future of Java(TM) technology. Join the Java Community Process(SM) (JCP(SM)) program now. http://ads.sourceforge.net/cgi-bin/redirect.pl?sunm0004en
_______________________________________________
Openca-Users mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/openca-users


Reply via email to