From owner-freebsd-ports@FreeBSD.ORG Tue Jun 2 15:01:27 2015 Return-Path: Delivered-To: ports@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [8.8.178.115]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id EA4A4526; Tue, 2 Jun 2015 15:01:27 +0000 (UTC) (envelope-from mcdouga9@egr.msu.edu) Received: from mail.egr.msu.edu (hill.egr.msu.edu [35.9.37.162]) by mx1.freebsd.org (Postfix) with ESMTP id C38071E34; Tue, 2 Jun 2015 15:01:27 +0000 (UTC) (envelope-from mcdouga9@egr.msu.edu) Received: from hill (localhost [127.0.0.1]) by mail.egr.msu.edu (Postfix) with ESMTP id 1A022426E3; Tue, 2 Jun 2015 11:01:19 -0400 (EDT) X-Virus-Scanned: amavisd-new at egr.msu.edu Received: from mail.egr.msu.edu ([127.0.0.1]) by hill (hill.egr.msu.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id J4U6XgmTkfvg; Tue, 2 Jun 2015 11:01:18 -0400 (EDT) Received: from EGR authenticated sender mcdouga9 Message-ID: <556DC53D.8000208@egr.msu.edu> Date: Tue, 02 Jun 2015 11:01:17 -0400 From: Adam McDougall User-Agent: Mozilla/5.0 (X11; FreeBSD amd64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: Ryan Steinmetz , Bryan Drewery CC: ports@freebsd.org Subject: Re: Fwd: Re: svn commit: r386904 - in head/www/apache22: . files References: <20150531132958.GB1034@egr.msu.edu> <556CB6C8.2070103@FreeBSD.org> <20150602115116.GA62387@exodus.zi0r.com> In-Reply-To: <20150602115116.GA62387@exodus.zi0r.com> Content-Type: text/plain; charset=windows-1252 Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-ports@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: Porting software to FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 02 Jun 2015 15:01:28 -0000 It still didn't work. Cannot load /usr/local/libexec/apache22/mod_ssl.so into server: /usr/local/libexec/apache22/mod_ssl.so: Undefined symbol "get_dh2048" Additionally I'm concerned about the validity of renaming small primes and using them as if they were for much larger dh. When I do google searches for dh3072_p and dh2048_p I find larger sets of numbers. Renaming the existing primes doesn't feel right and worries me. On 06/02/2015 07:51, Ryan Steinmetz wrote: > Adam, > > Please test the following patch. It should be placed in the files > directory and should resolve the error you saw. > > https://people.freebsd.org/~zi/patch-modules_ssl_ssl__engine__dh.c > > You can then build the build as usual after running a 'make clean' > > -r > > On (06/01/15 14:47), Bryan Drewery wrote: >> On 5/31/2015 8:29 AM, Adam McDougall wrote: >>> Is anyone else getting this issue? I had to revert the change on my >>> systems. >>> Thanks. >>> >> >> Yes it looks incomplete. Nothing is providing get_dh2048. >> >>> work/httpd-2.2.29/modules/ssl/ssl_engine_dh.c:static DH *get_dh512(void) >>> work/httpd-2.2.29/modules/ssl/ssl_engine_dh.c:static DH >>> *get_dh1024(void) >>> work/httpd-2.2.29/modules/ssl/ssl_engine_dh.c: dh = get_dh2048(); >>> work/httpd-2.2.29/modules/ssl/ssl_engine_dh.c: dh = get_dh3072(); >>> work/httpd-2.2.29/modules/ssl/ssl_engine_dh.c: dh = get_dh3072(); >> >> The module is only providing 512 and 1024 but not 2048 and 3072 symbols. >> >> >> -- >> Regards, >> Bryan Drewery >> > > >