Apache with mod_ssl on Solaris 9 (from source)

From: Andreas Höschler (ahoesch@smartsoft.de)
Date: Fri Dec 17 2004 - 18:21:33 EST


Dear managers,

I am still trying to get this working. Somebody mentioned that there
was a problem with the openssl 0.9.6i package from sunfreeware.com.
Therefore I decided to install from source. I did the following:

        gunzip apache-1.3.27.tar.gz
        tar xvf apache-1.3.27.tar

        gunzip mod_ssl-2.8.12-1.3.27.tar.gz
        tar xvf mod_ssl-2.8.12-1.3.27.tar

        gunzip openssl-0.9.6i.tar.gz
        tar xvf openssl-0.9.6i.tar

Build OpenSSL.

        cd openssl-0.9.6i
           ./config
           make
          make test
        make install
        cd ..

Apply a patch to the Apache sources and build apache.
        
        cd mod_ssl-2.8.12-1.3.27
        ./configure --with-apache=../apache_1.3.27 --with-eapi-only
        cd ..

        cd apache_1.3.27
        ./configure --prefix=/usr/local/apache --enable-module=all
--enable-shared=max --enable-rule=EAPI --with-layout=Apache
--disable-module=auth_db
        make
        make install
        cd ..

Now build mod_ssl

        cd mod_ssl-2.8.12-1.3.27
        ./configure --with-ssl=../openssl-0.9.6i
--with-apxs=/usr/local/apache/bin/apxs
        make
        make install

The follwing command gives a list of available and statically linked
modules.

        /usr/local/apache/bin/httpd -l

Compiled-in modules:
   http_core.c
   mod_so.c
suexec: disabled; invalid wrapper /usr/local/apache/bin/suexec

Create certificate.

        cd /usr/local/ssl/certs
        ...
        ...
        cp server.key /usr/local/apache/conf/advanced-it.key
        cp server.crt /usr/local/apache/conf/advanced-it.crt

I then edited httpd.conf

        Port 80
        Listen 80
        Listen 443
        ServerAdmin ahoesch@advanced-it.org
        ServerName www.advanced-it.org

<VirtualHost _default_:443>
SSLEngine on
SSLCertificateFile /usr/local/apache/conf/advanced-it.crt
SSLCertificateKeyFile /usr/local/apache/conf/advanced-it.key
BrowserMatch "MSIE 4\.0b2;" nokeepalive downgrade-1.0 force-response-1.0
SetEnvIf User-Agent ".*MSIE.*" nokeepalive ssl-unclean-shutdown
</VirtualHost>

and started the guy. Now I get

/usr/local/apache/bin/apachectl start

Syntax error on line 1054 of /usr/local/apache/conf/httpd.conf:
Invalid command 'SSLEngine', perhaps mis-spelled or defined by a module
not included in the server configuration
/usr/local/apache/bin/apachectl start: httpd could not be started

I hoped the above process from sunfreeware.com would setup apache with
mod_ssl. What is still missing? Thanks a lot!

Regards,

   Andreas
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:29:54 EDT