On Thu October 23 2008, patrick wrote: > hi all, > > it's now working (including apache / mod-ssl). i had to: > > ------------------ > debian etch > ------------------ > openssl > ./config --prefix=/usr/local --openssldir=/etc/ssl shared threads > > apache > ./configure ...... --enable-ssl --with-ssl=/usr/local > > BUT i had to replace the libs in /usr/lib/i686/cmov (ssl / crypto) with the > new ones (found in /usr/local/lib/). found this with ldd httpd. i don't know > if it will mess my system... any debian user? >
The obvious thing to do is check the directroy search list in /etc/ld.so.conf which is either a list of directories for the loader to search, or one or more "include" statements of directories that contain the list fragments. The non-obvious thing to check is the default search list compiled into the loader. You might have to apt-get source the version of glibc your using to find that. In glibc-2.7 for Debian/Lenny - Debian patches the default search list: Standard default: /lib /usr/lib Debian addition by patch: /usr/local/lib Those "default" directories are searched _after_ the configuration listed directories. The description of your change tells me that /usr/lib/i686/cmov gets searched _prior_ to the default /usr/local/lib - either by a text entry in ld.so.conf or one of the directories in conf includes or by a patch to glibc. Physically moving the libraries leaves the installation "out of sync" with where your package manager "thinks" it put the most recent update. ;) Better that you put them back, and edit the config file. Which, because of the prefix you specified when you built the libraries, means putting /usr/local/lib early rather than late in the search. Now that might break things. Take a deep breath, undo what you have done, rebuild with a --prefix=/something/for/my/custom/libraries then, after the install process, if the makefile did not put your custom directory into ld.so.conf (or put it in the wrong place) hand edit ld.so.conf to put your custom directory early in the search order; then run ld.config; that should fix you up. Mike > pat > > > > ______________________________________________________________________ > OpenSSL Project http://www.openssl.org > User Support Mailing List openssl-users@openssl.org > Automated List Manager [EMAIL PROTECTED] > > ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List openssl-users@openssl.org Automated List Manager [EMAIL PROTECTED]