Hi David, I have exactly the same problem on CentOS-5.10 with openssl1.0.1e. It seams you are indicating your openssl installation from source went wrong somewhere. This is how I compiled and installed openssl from source:
$ ./Configure --prefix=/usr/local --openssldir=/usr/local/openssl enable-tlsext linux-x86_64 threads zlib enable-idea enable-rc5 enable-mdc2 enable-ec shared $ make depend $ make $ sudo make install still apache ab tool seams linking to wrong library during compile although I have given --with-ssl=/usr/local/openssl as location in the configure step. Can you provide more details on how did you exactly solve the problem? Thanks, Igor On Fri, Nov 1, 2013 at 10:12 PM, David Benfell < benf...@mail.parts-unknown.org> wrote: > On 2013-11-01 03:32, Pete Houston wrote: > >> Hello David, >> >> On Fri, Nov 01, 2013 at 03:21:35AM -0700, David Benfell wrote: >> >>> I built openssl from source. I'm trying to get TLS 1.2 working, >>> which the old and crufty openssl on Centos 6.4 doesn't do. Do I need >>> to do something different to get the development libraries in place? >>> >> >> Since it is the build of ab which fails to link to client methods, did >> you correctly build and deploy these with your build of openssl? If so, >> you may just need to tell the linker where they are. >> > > I'm not seeing a lot of options where I could have gone wrong (which maybe > means I missed something horrendous). I repeated 'make test' there and saw > that it did TLSv1.2 tests. And 'make test' completes okay. > > >> Try a standalone test of a TLSv1.2 client method with openssl to see >> if you have built these features correctly. >> > > Okay, stupid question time: How do I do this? I tried: > > openssl s_client -connect gmail.com:443 > > This, among other verbiage, seemed to indicate it was using a protocol of > TLSv1.2. > > > If it works, just pass >> the lib locations on your apache ./configure line (probably using >> --with-ssl=DIR). >> > > That would seem to be --with-ssl=/usr/include/openssl , which has lots of > fresh .h files. I don't seen anything remotely relevant in /usr/lib . > > > OTOH, if it fails, you'll probably have to revisit your >> build of openssl. >> >> HTH, >> >> Pete >> > > -- > David Benfell <benf...@parts-unknown.org> > Normally you should expect a GnuPG signature: https://parts-unknown.org/ > node/2 But this mailer does not support it. > > --------------------------------------------------------------------- > To unsubscribe, e-mail: users-unsubscr...@httpd.apache.org > For additional commands, e-mail: users-h...@httpd.apache.org > >
