From owner-freebsd-apache@FreeBSD.ORG Tue Apr 8 21:09:22 2014 Return-Path: Delivered-To: apache@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id B02BA7ED for ; Tue, 8 Apr 2014 21:09:22 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.21]) (using TLSv1.2 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 311811577 for ; Tue, 8 Apr 2014 21:09:21 +0000 (UTC) Received: from [192.168.0.100] ([87.139.233.65]) by mail.gmx.com (mrgmx103) with ESMTPSA (Nemesis) id 0LjJCt-1X8tl23Ikx-00db18; Tue, 08 Apr 2014 23:09:19 +0200 Message-ID: <53446581.7070802@gmx.de> Date: Tue, 08 Apr 2014 23:09:21 +0200 From: olli hauer User-Agent: Mozilla/5.0 (Windows NT 5.1; rv:24.0) Gecko/20100101 Thunderbird/24.4.0 MIME-Version: 1.0 To: apache@FreeBSD.org Subject: Re: www/apache22 not honoring WITH_OPENSSL_PORT=yes under FreeBSD 10? References: In-Reply-To: X-Enigmail-Version: 1.6 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:KdFeiGs/duEpGkJPSS87FG8O/uVJjjwAr0o9v+jvpxNefQB8FN4 x5vljACJMDkUJuJ6dZ94Xa6fuCSOiHBnMgxYHHTixvgUH2x4mMWHMEvGbJjLGIxJNhCfuwq 3TvwLspF3jNPriaYqQzKDR1TgkCLnQNtl6Ajc6E0oDu6hxHvgJ8XkGEeNrH47a+qXjt+P2Y RBVGZ2rusmeuv0NXKPBZg== Cc: Philip Jocks X-BeenThere: freebsd-apache@freebsd.org X-Mailman-Version: 2.1.17 Precedence: list List-Id: Support of apache-related ports List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 08 Apr 2014 21:09:22 -0000 On 2014-04-08 17:58, Philip Jocks wrote: > Hej, > > I just came across this: When building in a fresh jail, mod_ssl.so is linked against the base libraries instead of those from ports: > > # ldd /var/ports/basejail/usr/ports/www/apache22/work/httpd-2.2.27/modules/ssl/.libs/mod_ssl.so > /var/ports/basejail/usr/ports/www/apache22/work/httpd-2.2.27/modules/ssl/.libs/mod_ssl.so: > libssl.so.7 => /usr/lib/libssl.so.7 (0x801630000) > libcrypto.so.7 => /lib/libcrypto.so.7 (0x801899000) > libcrypt.so.5 => /lib/libcrypt.so.5 (0x801c84000) > libthr.so.3 => /lib/libthr.so.3 (0x801ea4000) > libc.so.7 => /lib/libc.so.7 (0x80081d000) > > In an older FreeBSD 8.x jail it works as expected. A friend of mine confirmed with a fresh FreeBSD 10 VM. > Am I missing something? > Hi Philip, have you also build devel/apr1 with 'WITH_OPENSSL_PORT=yes' in /etc/make.conf? apache22/24 uses only the information from apr-1-config to calculate the path to openssl As far as I know more and more crypto/ssl stuff will will be relocated from httpd source to apr/apu. Here are some outputs from apu-1-config, build with OpenSSL from base / ports so you can compare it with the output from apr-1-config on your system. OpenSSL base: ================= $> usr/local/bin/apu-1-config --includes -I/usr/local/include/apr-1 -I/usr/include -I/usr/local/include -I/usr/local/include/db5 /usr/local/bin/apu-1-config --ldflags -L/usr/lib -L/usr/local/lib -L/usr/local/lib/db5 OpenSSL ports: ================= $> /usr/local/bin/apu-1-config --includes -I/usr/local/include/apr-1 -I/usr/local/include -I/usr/local/include/db5 $> /usr/local/bin/apu-1-config --ldflags -L/usr/local/lib -L/usr/local/lib/db5 And also important '/usr/local/share/apr/build-1/apr_rules.mk' diff -nru base_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk ports_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk --- base_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk 2014-04-08 23:00:48.000000000 +0200 +++ ports_1.5.0.1.5.3/usr/local/share/apr/build-1/apr_rules.mk 2014-04-08 23:00:46.000000000 +0200 @@ -42,8 +42,8 @@ # configure adds to them for tests, but we restore them at the end. # CFLAGS=-O2 -pipe -fno-strict-aliasing -CPPFLAGS=-I/usr/include -LDFLAGS= -L/usr/lib -Wl,-rpath,/usr/lib:/usr/local/lib +CPPFLAGS=-I/usr/local/include -I/usr/local/include +LDFLAGS= -L/usr/local/lib -Wl,-rpath,/usr/local/lib -L/usr/local/lib LIBS= DEFS=-DHAVE_CONFIG_H -- HTH, olli