Responding to the security warning, I did the emerge --ask --oneshot --verbose ">=net-www/mod_ssl-2.8.24" only to discover after shutting down apache that now it won't restart: # /init/apache start * Starting apache... Syntax error on line 59 of /etc/apache/conf/apache.conf: Cannot load /etc/apache/extramodules/libssl.so into server: /etc/apache/extramodules/libssl.so: cannot open shared object file: No such file or directory I expect I'll figure out a workaround presently (or have a real pissed client). There was no warning message about this enter at the end of the install nor in the security announcement. Reproducible: Always Steps to Reproduce: 1. 2. 3. # emerge info Portage 2.0.51.22-r2 (default-linux/x86/2005.0/2.4, gcc-3.3.6, glibc-2.3.5-r1, 2.4.20 i686) ================================================================= System uname: 2.4.20 i686 Intel(R) Pentium(R) III CPU - S 1400MHz Gentoo Base System version 1.4.16 dev-lang/python: 2.2.3-r5, 2.3.4 sys-apps/sandbox: 1.2.10 sys-devel/autoconf: 2.59-r5 sys-devel/automake: 1.8.5-r1 sys-devel/binutils: 2.15.92.0.2-r10 sys-devel/libtool: 1.4.3-r4, 1.5.2-r7 virtual/os-headers: 2.4.19-r1, 2.4.22-r1 ACCEPT_KEYWORDS="x86" AUTOCLEAN="yes" CBUILD="i686-pc-linux-gnu" CFLAGS="-march=pentium3 -O2 -fomit-frame-pointer -fprefetch-loop-arrays -funroll-loops -pipe" CHOST="i686-pc-linux-gnu" CONFIG_PROTECT="/etc /usr/X11R6/lib/X11/xkb /usr/kde/2/share/config /usr/kde/3.1/share/config /usr/kde/3/share/config /usr/share/config /var/bind /var/qmail/control" CONFIG_PROTECT_MASK="/etc/gconf /etc/terminfo /etc/env.d" CXXFLAGS="-march=pentium3 -O2 -fomit-frame-pointer -fprefetch-loop-arrays -funroll-loops -pipe" DISTDIR="/usr/portage/distfiles" FEATURES="autoconfig distlocks sandbox sfperms strict" GENTOO_MIRRORS="http://distfiles.gentoo.org http://distro.ibiblio.org/pub/Linux/distributions/gentoo" PKGDIR="/usr/portage/packages" PORTAGE_TMPDIR="/var/tmp" PORTDIR="/usr/portage" SYNC="rsync://rsync.gentoo.org/gentoo-portage" USE="x86 X alsa apm arts avi berkdb bitmap-fonts crypt eds emboss encode fam foomaticdb fortran gd gdbm gif gpm gstreamer gtk gtk2 imlib ipv6 java jpeg kde libg++ libwww mad mbox mikmod motif mp3 mpeg mysql ncurses nls ogg oggvorbis opengl oss pam pdflib perl png python qt quicktime readline samba sdl slang spell ssl svga tcpd tiff truetype truetype-fonts type1-fonts vorbis xml2 xmms xv zlib userland_GNU kernel_linux elibc_glibc" Unset: ASFLAGS, CTARGET, LANG, LC_ALL, LDFLAGS, LINGUAS, MAKEOPTS, PORTDIR_OVERLAY
Ah, it's moved: Replacing: LoadModule ssl_module extramodules/libssl.so With: LoadModule ssl_module /usr/lib/apache/modules/libssl.so in apache.conf does the trick.
- metadata.xml includes the invalid alias apache-devs@gentoo.org
You need -r1, this bug is invalid. As for the GLSA, see Bug 106907.
(In reply to comment #3) > You need -r1, this bug is invalid. As for the GLSA, see Bug 106907. This _was_ with -r1, and confirmed on four different systems I upgraded at the same time. Excuse me for saying, but when the performance metric is how many bugs you can close, bugs get closed down too fast, too often. In any case, using -r1 is what _produces_ the problem, not what _fixes_ it. What fixes it is a simple hand-edit on apache.conf. There should be a notice of this in either the GLSA, or at the end of the ebuild, or both.
We don't have performance metrics in Gentoo - it's all volunteer based. As far as needing -r1, you need -r1 for both apache and mod_ssl. What happened when you ran that command is that is tried using an old-style module with new-style apache. At the time, old-style was what was stable and new-style was in ~arch. adding net-www/mod_ssl to /etc/portage/package.keywords would have fixed the issue for you. As new-style is stable now, the issue is long past gone.
