th3mp's mod_ssl notes

mod_ssl_notes (text/plain), 4.74 KB, created by Jason Wever (RETIRED) on 2003-07-23 17:27:59 UTC

	Mod_ssl on linux in the brief.

first grab all the source you will need the following.

>= apache_1.3.27
>= mm-1.2.1
>= mod_ssl-2.8.12-1.3.27
>= openssl-0.9.6i


i recomend getting them with rsync

if you dont know how to do this grab this.

http://65.102.165.169/cgi-bin/cgi/cvsweb.cgi/SOURCE/WEBSSL/apache_ssl_in_a_box.tar.bz2

untar this in the directory you with to build apache with mod_ssl in.

ie. tar -jxvf apache_ssl_in_a_box.tar.bz2 -C /usr/local/src

then build the openssl library

cd to in my example above /usr/local/src/openssl-0.9.6i



sh config \
  no-idea \   
  no-threads \
  -fPIC \     
make \        
make test \                                                     
cd .. \                                                            

Considering all went well on to mm

cd mm-1.1.* \                                         
./configure --disable-shared \                         
make \                                                 
cd ..                                                

On to mod_ssl

run these configure options change at will
cd mod_ssl-2.8.12-1.3.27

./configure \                                                    
--with-apache=../apache_1.3.* \                              
--with-ssl=../openssl-0.9.* \                                
--with-mm=../mm-1.1.* \                       
--prefix=/usr/sbin/apache \                                   
 --with-crt=/etc/apache/conf/ssl.crt/server.crt \          
--with-key=/etc/apache/conf/ssl.key/server.key \
#[--enable-shared=ssl] \                                  OPTIONAL
#[--disable-rule=SSL_COMPAT] \                            OPTIONAL
#[--enable-rule=SSL_SDBM] \                               OPTIONAL
#[--enable-rule=SSL_EXPERIMENTAL] \                       OPTIONAL
#[--enable-rule=SSL_VENDOR] \                             OPTIONAL
cd ..                                                            
cd apache_1.3.*                                                  
make                                                             
# make certificate                                        OPTIONAL   
make install                                                     
cd ..

Now for apache.

cd apache_1.3.27

Note: you may have to edit a few of the names here i may have typoed a few 
Havnt testing this build in a month or so.

./configure \
                --prefix=/usr \
                --exec-prefix=/usr \
                --bindir=/usr/bin \
                --sbindir=/usr/sbin \
                --libexecdir=/usr/lib/apache \
                --mandir=/usr/share/man \
                --sysconfdir=/etc/apache/conf \
                --datadir=/home/httpd \
                --iconsdir=/home/httpd/icons \
                --htdocsdir=/home/httpd/htdocs \
                --manualdir=/usr/share/doc/apache-1.2.27/manual \
                --cgidir=/home/httpd//cgi-bin \
                --includedir=/usr/include/apache \
                --localstatedir=/var \
                --runtimedir=/var/run \
                --logfiledir=/var/log/apache \
                --proxycachedir=/var/cache/apache \
                --target=apache \
                --server-uid=apache \
                --server-gid=apache \
                --enable-rule=EAPI \
                --enable-rule=SHARED_CHAIN \
                --with-perl=/usr/bin/perl \
                --enable-suexec \
                --suexec-uidmin=1000 \
                --suexec-gidmin=100 \
                --suexec-caller=apache \
                --suexec-userdir=public_html \
                --suexec-docroot=/home \
                --suexec-safepath="/bin:/usr/bin" \
                --suexec-logfile=/var/log/apache/suexec_log \
		--enable-module=ssl\
		--enable-module=example \
		--enable-module=auth_digest \
		--enable-module=mmap_static \
		--enable-module=proxy \
		--enable-module=access \
		--enable-module=actions \
		--enable-module=alias \
		--enable-module=asis \
		--enable-module=auth \
		--enable-module=auth_anon \
		--enable-module=auth_db \
		--enable-module=auth_dbm \
		--enable-module=autoindex \
		--enable-module=cern_meta \
		--enable-module=cgi \
		--enable-module=digest \
		--enable-module=dir \
		--enable-module=env \
		--enable-module=expires \
		--enable-module=headers \
		--enable-module=imap \
		--enable-module=include \
		--enable-module=info \
		--enable-module=log_agent \
		--enable-module=log_config \
		--enable-module=log_referer \
		--enable-module=mime \
		--enable-module=mime_magic \
		--enable-module=negotiation \
		--enable-module=rewrite \
		--enable-module=setenvif \
		--enable-module=so \
		--enable-module=spelling \
		--enable-module=status \
		--enable-module=unique_id \
		--enable-module=userdir \
		--enable-module=usertrack \
		--enable-module=vhost_alias \

make
make install


should be good to go.


-aaron waller