From owner-freebsd-net@freebsd.org Wed May 2 13:08:36 2018 Return-Path: Delivered-To: freebsd-net@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id D11AAFA8FFE for ; Wed, 2 May 2018 13:08:35 +0000 (UTC) (envelope-from gessel@blackrosetech.com) Received: from mail.blackrosetech.com (shiofuki.blackrosetech.com [173.228.36.135]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mx1.freebsd.org (Postfix) with ESMTPS id 4E25D740B5 for ; Wed, 2 May 2018 13:08:34 +0000 (UTC) (envelope-from gessel@blackrosetech.com) Received: from shiofuki (shiofuki [10.3.69.135]) by mail.blackrosetech.com (Postfix) with ESMTP id 9A69A3919CE for ; Wed, 2 May 2018 06:08:28 -0700 (PDT) X-Virus-Scanned: amavisd-new at blackrosetech.com Received: from mail.blackrosetech.com ([10.3.69.135]) by shiofuki (shiofuki.blackrosetech.com [10.3.69.135]) (amavisd-new, port 10024) with ESMTP id TfeTJLnMlY6K for ; Wed, 2 May 2018 06:08:18 -0700 (PDT) Received: from [192.168.2.192] (unknown [185.34.17.7]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) (Authenticated sender: gessel@blackrosetech.com) by mail.blackrosetech.com (Postfix) with ESMTPSA id 1C2BD3919BB for ; Wed, 2 May 2018 06:08:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=blackrosetech.com; s=BRTDKIM; t=1525266498; bh=Zhsps1F5N7swAL3xU22AVuITSiEUAjfpyk7jPYZrGLQ=; h=To:From:Subject:Date; b=E7mwSoyvBMG+quCZIaiU2RuEiUl7QRQQTl70BdTwKD7Y13BQc4C4PQ/k1H7q0beWs t8fHKic0g7RVBFHszaXRjHsbjqPqDHi+CkF1PQaS9FMQqPwGjXs9hLrdY8IQuQyNlj q4gw2Z94UjRlfSg1qAJiL1gTpfVWyninayw96evo= To: freebsd-net From: David Gessel Subject: LibreSSL 2.7.2+ errors, last vexing one Apache24 fails with Cannot load libexec/apache24/mod_ssl.so Undefined symbol "OPENSSL_malloc_init" Openpgp: preference=signencrypt Autocrypt: addr=gessel@blackrosetech.com; prefer-encrypt=mutual; keydata= xsDiBDVT5mcRBADHJkpjwzaTcqLIu5gKXjTlPiWcpQ70IuMu206Az723CD8K2kn6Y0kOLozM MTB3sbeWRGTDfhQRJxYqwZzJlehe6Xz2ElQUnnMXe7Z6uR8vcy16qVxh3LlrYE4hM986XYG6 BgwvERjqyz4S/ZUhM8S2GNiKoM6v1QBbo79hRphNBQCg/2vqrQmyr7/cT/kGyBcM6RWSDIUE ALN0GeBfZj7ktfHWptGsNbpohbVSs9pfTAl/13H0WesIHATopwItf/AdClO+BKMrPISgvqVG n8GBwHfZStTPxtFkEQ/D7QLwQNwoCXmvovuQ7Zt7pgv2ja6vWa0BeoQ8z3PTHMcZHW9OdP8l jGa6LXk2yT4LGol4Ntuqhzx1mHLiBACjTQeTSuK74GQt9Bpk7IvJZLrTp3Byo5mE+I9qPPui VgRsHf5qSh3HKFBYrp9NA+b398SYn3sfFJJ2bKzt3B1zCo8GwzMEnroW+4K0VoPyrzG+QCpA LiKQbweYw/pWsfUJIJhjLAabPLTx+Kfz98PDwNQvAahP8irNUFf0YAevb80tRGF2aWQgSmFj b2IgR2Vzc2VsIDxnZXNzZWxAYmxhY2tyb3NldGVjaC5jb20+wmEEEBEIACECHgECF4ACGQEF AlYFO1QFCwkIBwMFFQoJCAsFFgIDAQAACgkQhoyRmrSyBPJDiwCg1VBTpJkfUBRSjPH/SHP0 E+VGbnUAoLZ3nK5heA63qsxpztC6DWxWW4CozsFNBE0AjSEBEADXLpgdmBA5NQbT3BDvDNuG H1nWkBZ+N6ermpXcga6kNdpmceePL0jLi/82S/qQstwxVm/sguQtNTUxdtT1E5+sk99IaKMh igLHSnc6A4RerGybz6CpqFV0JGPuDdXIlg4mToEuivolDA95emEE5Wz1me+o/QPrt7VJYtOp 6vIzBELFIfE+fkTVKAyX6loy+/jRdC/ClEY/6/x6O9fSt6wtpAkuFqwHG0LXXe85rU9rIf15 NhvgK/XyPb4yP00xBLS3SH2PTyU5aJAWfcpuzteSOvYPg06W89ZY4HKiEg8TdZ7GKQy3wq8c Lm8FaAKGpg/TpdnAIygQm3T843APyuBuluM/yb9lxEHqeZSAoeFXu6iWx5COQaCzxmCXFxnO M8sR9xf8NSEb0bAtvytDncDyCzTTPpNvEVGprDRaB+IJuw9USalZ6rxSZKV5RprdGYf+XyOS 4px4mm/cw2H+SXP68Qv/BJNrUjPODsOZJ1r5gtYE/hTGQYdGu5RBTgttUzN187KXOEv61Opl PV3aTxLsh3l2haLWRZke2ti+R3QtqnvvHRCIq7VzEw2Oyx2iYzT2uhvUKaUqu3Ncr/Dl4xiN 4gHsL8DvdnzIQ+/i95BFyNGphC6td59XQWOPrLqbRYM4jzfCar2gaJJUDpG1Nq1OUgZ6sJr3 cQZ85c1S01yGlwARAQABwkkEGBECAAkFAk0AjSECGwwACgkQhoyRmrSyBPLrGQCeLaI8AoWp gaAsm4FZ556bXXLE7qsAn3Z1fQTANN79wef6X+B9C/N6wXzW Organization: Black Rose Technology Message-ID: Date: Wed, 2 May 2018 16:08:13 +0300 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101 Thunderbird/52.7.0 MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Language: en-US Content-Transfer-Encoding: 8bit X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 02 May 2018 13:08:36 -0000 LibreSSL 2.7+ is a big change and it caused a host of issues for me, most of which I've resolved with the patches posted on the LibreSSL wiki at https://wiki.freebsd.org/LibreSSL/2.7, but www/apache24 is still refusing to start post-update (the port was patched for LibreSSL on 24 Mar with 2.4.33) my env: apache24-2.4.33 libressl-2.7.2_1 FreeBSD 10.3-RELEASE-p28 #0 r330946 (portmaster) When I try # apachectl restart I get: Apache24 will not start: httpd: Syntax error on line 130 of /usr/local/etc/apache24/httpd.conf: Cannot load libexec/apache24/mod_ssl.so into server: /usr/local/libexec/apache24/mod_ssl.so: Undefined symbol "OPENSSL_malloc_init" The following innocuous seeming error reported during the build seems relevant --- mod_ssl.slo --- mod_ssl.c:404:5: warning: implicit declaration of function 'OPENSSL_malloc_init' is invalid in C99 [-Wimplicit-function-declaration] OPENSSL_malloc_init(); mod_ssl.c: ± 405: C: /* We must register the library in full, to ensure our configuration * code can successfully test the SSL environment. */ #if MODSSL_USE_OPENSSL_PRE_1_1_API (void)CRYPTO_malloc_init(); #else OPENSSL_malloc_init(); #endif ERR_load_crypto_strings(); SSL_load_error_strings(); SSL_library_init(); #if HAVE_ENGINE_LOAD_BUILTIN_ENGINES ENGINE_load_builtin_engines(); #endif OpenSSL_add_all_algorithms(); OPENSSL_load_builtin_modules(); I don't see a declaration in mod_ssl.h. I believe the function is declared in OPENSSL_malloc, e.g. int OPENSSL_malloc_init(void) and that maybe the latest version of LibreSSL replaced the OpenSSL code that contained this declaration without replacing it. Or something like that. Maybe. Any hints? Also posted at https://bz.apache.org/bugzilla/show_bug.cgi?id=62346 and https://forums.freebsd.org/threads/apache24-fails-after-libressl-2-7-2-mod_ssl-so-undefined-symbol-openssl_malloc_init.65701/