Thanks for your response, Tim. Upon closer investigation, I was able to
figure out my problem. I jotted down a few notes below for those who
may come across a similar problem in the future.
Capt Ferguson
==============
[Fix]
I mentioned earlier that I compiled SSLeay and made appropriate mods to
the Apache configuration file (as mentioned in the INSTALL file from the
SSLeay source code distribution, and in "Apache: The Definitive Guide"
by Laurie & Laurie). However, the problem was that my re-make of Apache
would bomb towards the very end, saying that it couldn't find the
"apache_ssl.o" (the ssl_module).
As the "learned" Apache folks already know, there are three (3)
components for building SSL support into Apache: The Apache source code
(www.apache.org); an SSLeay implementation that works with one's
version of Apache (ftp.psy.uq.oz.au/pub/Crypto/SSL); and the version of
Ben Laurie's "Apache-SSL" for one's version of Apache (source code
patches that integrate Apache with SSLeay --- www.apache-ssl.org).
I had the former two parts, but not the latter (Apache-SSL). Even after
I obtained Apache-SSL, though, I still had to perform the a couple of
extra steps to make things work properly (not explicitly mentioned in
the instructions or the Lauries' book).
(1) COMPILE SSLEAY: Everything works as advertised in the instructions.
However, instead of ignoring the last "make install" step of the SSLeay
INSTALL instructions (as suggested on pg 224 of the Lauries' book), go
ahead and do it --- make install. It doesn't hurt, and it'll make it
easier to run the SSLeay utilities you'll need to request and install
digital certificates from a commercial Certificate Authority.
(2) PATCH APACHE WITH APACHE-SSL PATCH: Everything "almost" works as
mentioned in the instructions. What you need to watch out for is how
and _where_ you unpack the distribution. For this step, the
instructions that are provided with the Apache-SSL distribution are
generally better (although not quite as detailed) as the instructions in
the Lauries' book (pp 222-224). You need to make sure that you copy the
Apache-SSL GZIPped TAR file to the root directory ( .../apache-<version
#>/ ) of your unpacked Apache source directory, as mentioned in the
README.SSL file from the Apache-SSL distribution.
DO NOT unpack the Apache-SSL distribution in the following subdirectory
.../apache-<version #>/src
as mentioned on pg 222 of the Lauries' book. The way that Apache-SSL is
packaged, it was obviously intended to be unpacked in the Apache
distribution's root directory ( .../apache-<version #> ). For example,
here's the table of contents for Apache-SSL for Apache v1.2.4
-rw------- 200/50 1722 Oct 3 15:16:13 1997 ben.pgp.key.asc
-rw------- 200/50 2432 Apr 19 09:56:43 1997 LICENCE.SSL
-rw------- 200/50 3296 Oct 3 15:13:07 1997 CHANGES.SSL
-rw------- 200/50 3348 Sep 20 09:49:12 1997 README.SSL
-rw------- 200/50 441 Apr 19 09:56:43 1997 EXTRAS.SSL
-rw------- 200/50 1217 Apr 19 12:10:08 1997 SECURITY
-rw------- 200/50 36755 Oct 3 15:16:09 1997 SSLpatch
-rw------- 200/50 24876 Oct 3 14:43:16 1997 src/apache_ssl.c
-rw------- 200/50 0 Apr 19 09:58:20 1997
SSLconf/conf/access.conf
-rw------- 200/50 3044 Sep 20 09:18:44 1997 SSLconf/conf/httpd.conf
-rw------- 200/50 0 Apr 19 09:58:20 1997 SSLconf/conf/srm.conf
-rw------- 200/50 3263 Apr 19 09:58:20 1997 SSLconf/conf/mime.types
-rw------- 200/50 600 Oct 3 15:16:14 1997 md5sums
-rw------- 200/50 891 Oct 3 15:16:25 1997 md5sums.asc
If you unpack Apache-SSL as described above, do a "cd apache-<version
#>", and then run "patch < SSLpatch", the new apache_ssl.c file (source
code for the new Apache ssl_module) will be laid in the appropriate
directory: .../apache-<version #>/src/apache_ssl.c An added bonus is
that appropriate changes are made to your Apache configuration template
file (Configuration.tmpl) to add in the lines required to run
"./Configure" and build the makefile that'll put SSL support into your
version of Apache.
THIS WAS THE CAUSE OF MY PROBLEM. I unpacked the distribution in the
../apache-<version #>/src directory, which nested apache_ssl.c inside
of _another_ src directory
.../apache-<version #>/src/src/apache_ssl.c
That's why Apache's make couldn't find apache_ssl.o (it never saw
apache_ssl.c in the first place, so apache_ssl.o was never created).
(3) Recompile Apache: Works as advertised in the instructions (whether
your follow the instructions from the Apache distribution, or the
instructions from the Lauries' book, pg 225).
-----Original Message-----
From: Tim Bass [SMTP:[EMAIL PROTECTED]]
Sent: Monday, April 06, 1998 11:14 PM
To: [EMAIL PROTECTED]
Subject: Re: [ssl-users] Help! Problems Integrating SSLeay w/
Apache on Digital UNIX
Eric,
You have to patch apache with the ssl patches and recompile:
(1) compile ssleay
(2) patch apache with apache+ssl patch
(3) recompile apache
Regards,
Tim
>
> I'm trying to enable SSL support on my Apache web server, and would
like
> to know if anyone could assist me. I've followed the installation
> instructions from the INSTALL file that's included w/ the SSLeay
source
> code distribution, but my "make" for Apache fails to locate the
> "apache_ssl.o" module.
>
> I've provided a description of my operating environment, and of the
> SSLeay build and installation steps I've performed. If you notice
> anything peculiar or obviously wrong about my installation steps,
please
> reply via e-mail or phone and let me know.
>
> Thanks,
>
> ERIC FERGUSON, Capt, USAF
> AU Research Office (CADRE/ARS)
> Maxwell AFB AL 36112-6428
+-------------------------------------------------------------------------+
| Administrative requests should be sent to [EMAIL PROTECTED] |
| List service provided by Open Software Associates, http://www.osa.com/ |
+-------------------------------------------------------------------------+
