The Problem on the long term ubuntu 8.04 and the current stable debian is that they ship the old OpenSSL 0.9.8o With that I wasn’t able to compile the new apache 2.4.1 with all the SSL features I want. Downloading the OpenSSL source and just configure make make install didn’t help at all.
checking whether to enable mod_ssl... checking dependencies checking for OpenSSL... checking for user-provided OpenSSL base directory... none checking for OpenSSL version >= 0.9.7... FAILED configure: WARNING: OpenSSL version is too old no checking whether to enable mod_ssl... configure: error: mod_ssl has been requested but can not be built due to prerequisite failures mario@h2020668:~/apache24/httpd-2.4.1$ openssl version OpenSSL 0.9.8o 01 Jun 2010
The only thing that helped was to use the unix config script plus the right prefix plus the shared option
wget http://openssl.org/source/openssl-1.0.1.tar.gz tar xfz openssl-1.0.1.tar.gz cd openssl-* ./config --prefix=/usr zlib-dynamic --openssldir=/etc/ssl shared make sudo make install
Debian is very fine, but sometimes it sucks because of the lag of new software versions
Nag them, this was why the huge push by Stefan to get 2.4 out, so it could make it into the shiny new Debian. They should keep it more up to date, especially since this will eventually be the better way to mitigate the BEAST.
Debian has PHP 5.4 and Apache 2.4 in experimental, but not libapache2-mod-fcgid nor libapache2-mod-php so I can’t really test it. I’m not sure why upgraded several of the Apache modules, PHP and Apache itself, and not any way to use PHP with Apache 2.4.
I’ve made a post how to compile Apache 2.4 with mod_fcgid
http://mariobrandt.de/archives/apache/compling-apache-2-4-on-ubuntu-or-debian-519/
Now i have to recompile apache2.4.2… SIGH!
Thanks man :-)
“apt-get install libssl-dev” should fix the “WARNING: OpenSSL version is too old” error – at least it did it in my case.
maybe it helps… :)
Thanks for this page.
I’ve just used it for the for the ‘heartbleed’ update.
Just changed the the source url before using the wget command.
Thanks!
Thanks!!! :)
This is exactly what I needed!
Nice!
Used this to upgrade OpenSSL on Ubuntu 8.04 LTS from 0.9.8.g (last version available in apt) to 0.9.8za.
Needed to close this vulnerability to pass PCI scan: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0224
Thanks for the help!
Thanks !
You save my day !