Topic: Compiling Apache 2.4.63, openssl 8.0 getting ssl error

[Anitha]

Hello Experts,
compiling Apache 2.4.63 with openssl 8.0. facing following error. openssl compiled in 32 bit and its successful.

Log:
====
/MANIFEST /MANIFESTFILE:mod_ssl.so.manifest" failed (exit code 1120) with the following output:
Creating library mod_ssl.lib and object mod_ssl.exp
ssl_engine_io.c.obj : error LNK2019: unresolved external symbol _SSL_get_peer_certificate referenced in function _ssl_io_filter_handshake
ssl_engine_kernel.c.obj : error LNK2001: unresolved external symbol _SSL_get_peer_certificate
ssl_engine_vars.c.obj : error LNK2001: unresolved external symbol _SSL_get_peer_certificate
ssl_engine_pphrase.c.obj : error LNK2019: unresolved external symbol _ERR_put_error referenced in function _ssl_pphrase_Handle_CB
mod_ssl.so : fatal error LNK1120: 2 unresolved externals
NMAKE : fatal error U1077: 'C:\CMake323\bin\cmake.exe' : return code '0xffffffff'
Stop.
NMAKE : fatal error U1077: '"C:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\BIN\nmake.exe"' : return code '0x2'
Stop.
NMAKE : fatal error U1077: '"C:\Program Files (x86)\Microsoft Visual Studio 14.0\VC\BIN\nmake.exe"' : return code '0x2'
Stop.

Thanks,
Anitha.S

[Anitha]

Team kinldy help as soon as.

[tangent]

Hello Anitha,

You've previously posted concerning build issues with OpenSSL 8.0, and as James Blond replied at the time, there is no version 8 of OpenSSL. So somewhat confusing.

Are you refering to OpenSSH 8.x, which uses an OpenSSL library for support, namely libcrypto?

A quick search of the net for your unresolved symbol reference (SSL_get_peer_certificate), suggests this is down to you using old versions of ssl.h and other related header files, as much as the library itself, e.g. https://stackoverflow.com/questions/77803049

Which version of OpenSSL are you trying to link with your HTTPD build?

[Anitha]

Hello tangent,

Thanks for the prompt reply, and sorry for the confusion.
To compile the httpd 2.4.63 I am using exactly ciscossl-3.0.16.8.0.277.tar.gz. Which internal has openssl. So I have mentioned OpenSSL 8.0.

Dependent packages are compiled properly, and CiscoSSL also. While compiling, the httpd at the end throws the SSL certificate error. Kindly help me to clear the error.

Thanks,
Anitha.S

[tangent]

I'm afraid your reply doesn't help much, except to say you're evidently using a proprietary vendor supplied version of SSL, rather than generic OpenSSL source.

Your CiscoSSL package starts with 3.0.16, so does that suggest it's based on OpenSSL 3.0.16 series?

I can find no reference to any CiscoSSL packages on the net, let alone download that specific one to know what it contains, but am guessing this issue relates to the Cisco SSL appliance, which is evidently now out of support?

In any case, why don't your simply compile an appropriate recent release of OpenSSL (say 3.3 series), and link that into your HTTPD compilation (header and lib files) instead of those that come with the CiscoSSL package?

Sorry, but that's the best suggestion I can make.

[Anitha]

Sure then i will try with openssl and do the compilation and update the status here.

[Anitha]

Compiled the Apache 2.4.63 with openssl 3.0.16 and the compilation went fine.

Thanks a lot for your support and help.
-Anitha.S

[Anitha]

Hi
Again, the ApacheMonitor.exe file is missing after successful Apache compilation. No errors found in CLI. But this exe file is not present under apache24 output folder.

I am facing the error in libxml2, so I skipped this package and compiled Apache 2.4.63. IS that libxml is really needed?.

others package which i compiled
apr,apr-util,apr-iconv, expact, pcre2, openssl, zlib.

Those are compiled properly without any issues. Kindly help how to bring the Apachemonitor.exe.

Thanks,
Anitha.S

[tangent]

You've not described your build process in detail, but would seriously suggest you look at the site HOWTO: Building Apache and dependencies using CMake, https://www.apachelounge.com/viewtopic.php?t=8609.

It covers building the major packages needed to support HTTPD, including LIBXML2.

Yes, you can pare down this list, but you will reduce the range of modules and functionality Apache provides. With the build as described, this is the list of features reported:

-- Summary of feature detection:
--
-- LIBXML2_FOUND ............ : TRUE
-- LUA51_FOUND .............. : TRUE
-- NGHTTP2_FOUND ............ : TRUE
-- OPENSSL_FOUND ............ : TRUE
-- ZLIB_FOUND ............... : TRUE
-- BROTLI_FOUND ............. : TRUE
-- CURL_FOUND ............... : TRUE
-- JANSSON_FOUND ............ : TRUE
-- APR_HAS_LDAP ............. : TRUE
-- APR_HAS_XLATE ............ : TRUE
-- APU_HAVE_CRYPTO .......... : TRUE

Amongst other things, the HowTo also details a minor edit to the HTTPD CMakeLists.txt file, to support building the ApacheMonitor.exe file.