| Summary: | www-servers/apache-2.4.37 not starting with SSL SSL_CTX_set_post_handshake_auth | ||
|---|---|---|---|
| Product: | Gentoo Linux | Reporter: | Joerg Neikes <j.m.neikes> |
| Component: | Current packages | Assignee: | Apache Team - Bugzilla Reports <apache-bugs> |
| Status: | UNCONFIRMED --- | ||
| Severity: | normal | CC: | hydrapolic, j0inty, reuben-gentoo-bugzilla, strites |
| Priority: | Normal | ||
| Version: | unspecified | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Package list: | Runtime testing required: | --- | |
| Attachments: | libressl.patch | ||
|
Description
Joerg Neikes
2018-10-25 15:11:10 UTC
By the way i read in the changelogs:
*) mod_ssl: Add support for OpenSSL 1.1.1 and TLSv1.3. TLSv1.3 has
behavioural changes compared to v1.2 and earlier; client and
configuration changes should be expected. SSLCipherSuite is
enhanced for TLSv1.3 ciphers, but applies at vhost level only.
[Stefan Eissing, Yann Ylavic, Ruediger Pluem, Joe Orton]
I use libressl. I think TLSv1.3 was not possible till now.
Using dev-libs/libressl-2.6.5.
Hi, the following error message I found in my /var/log/apache2/startuperror.log. [snip] apache2: Syntax error on line 137 of /etc/apache2/httpd.conf: Cannot load modules/mod_ssl.so into server: /usr/lib64/apache2/modules/mod_ssl.so: undefined symbol: SSL_CTX_set_post_handshake_auth [/snap] A downgrade to previous 2.4.35 let me start my apache again. megatron ~ # qlist -Iv apache libressl app-admin/apache-tools-2.4.35 app-crypt/certbot-apache-0.27.1 dev-libs/libressl-2.6.5 www-apache/mod_evasive-1.10.1-r1 www-servers/apache-2.4.35 There is a patch in Void Linux Github which fixes this problem: https://github.com/void-linux/void-packages/blob/master/srcpkgs/apache/patches/libressl.patch Perhaps the fix could be picked up by Gentoo as well. Created attachment 554134 [details, diff]
libressl.patch
libressl patch for apache-2.4.37
(In reply to Reuben Farrelly from comment #3) > There is a patch in Void Linux Github which fixes this problem: > > https://github.com/void-linux/void-packages/blob/master/srcpkgs/apache/ > patches/libressl.patch > > Perhaps the fix could be picked up by Gentoo as well. Thanks Reuben. Added the patch to this bug report. Testet it on live Server. Works now. This is what i have done: mkdir /etc/portage/patches/www-servers/apache-2.4.37 -p cd /etc/portage/patches/www-servers/apache-2.4.37 wget https://669584.bugs.gentoo.org/attachment.cgi?id=554134 -O libressl.patch emerge app-admin/apache-tools www-servers/apache |