How can I add mod_ssl to existing Apache server.

Hi All,

I have one Apache Server 1.3.20 and it works well.
Now I want to add mod_ssl to it, but I don't want to re-compile Apache.
I want to compile mod_ssl to DSO libssl.so and copy it
/usr/local/apache/libexec.
Then modified http.conf to support ssl.
( I have installed openssl-0.9.6)

So there is manual or detail steps to complete this?

Or I have to re-compile my Apache.

Thank you in advance!

Franklin

"Franklin Lee" <pengtaoli@hotmail.com> wrote in ...
> Hi All,
>
> I have one Apache Server 1.3.20 and it works well.
> Now I want to add mod_ssl to it, but I don't want to re-compile Apache.
> I want to compile mod_ssl to DSO libssl.so and copy it
> /usr/local/apache/libexec.
> Then modified http.conf to support ssl.
> ( I have installed openssl-0.9.6)
>
> So there is manual or detail steps to complete this?
>
> Or I have to re-compile my Apache.

If your httpd does not have mod_so compiled in, then
you need to re-build your httpd.
http://httpd.apache.org/docs/dso.html

On Fri, 24 Oct 2003 17:11:15 +0800, Franklin Lee <pengtaoli@hotmail.com> wrote:
> Hi All,
>
> I have one Apache Server 1.3.20 and it works well.
> Now I want to add mod_ssl to it, but I don't want to re-compile Apache.
> I want to compile mod_ssl to DSO libssl.so and copy it
> /usr/local/apache/libexec.
> Then modified http.conf to support ssl.
> ( I have installed openssl-0.9.6)
>
> So there is manual or detail steps to complete this?
>
> Or I have to re-compile my Apache.
>
Most likely you'll have to recompile Apache because mod_ssl needs special hooks
inserted in Apache. It is very simple to determine - if httpd -V lists -DEAPI
and httpd -l lists mod_so.c, then mod_ssl can be added, if not then you'll
have to recompile. Instructions for compiling and installing are in the
mod_ssl tarball in INSTALL.
But please note that 1.3.20 is very old and does have known security flaws.
You should probably upgrade regardless of wether you're forced to it or not.

vh

Mads Toftum
--
Speaking at ApacheCon 2003 - http://ApacheCon.com/
T03, "Apache 2 mod_ssl tutorial" (3h)
WE03, "Troubleshooting Apache configurations"
WE11, "Apache mod_rewrite, the Swiss Army Knife of URL manipulation"

Franklin,

I really think that you should start looking at Apache2. The older
version will become obsolete. Apache.org is maintaining the older version
for security issues only. Apache2 is the latest version and I wouldn't
think you would want to limit your experience to a version that will,
IMHO, not be supported soon. Compiling Apache2 shouldn't be an issue at
all. I've included the configure options for my system to help provide
advice to make your compiling be easier. I've included my openssl compile
instructions, as well.


I always place my apps in /usr/local for easy backup and disaster recovery
reasons. This is for openssl.

../config --prefix=/usr/local -mcpu=i486
make
make test
make install

Download Apache2:

tar -zxvf the file in /usr/local
../configure --prefix=/usr/local/apache2 --enable-so --enable-cgi
--enable-info --enable-rewrite --enable-speling --enable-usertrack
--enable-deflate --enable-ssl --with-ssl=/usr/local/ssl
--enable-mime-magic --enable-expire
make
make install

This is all assuming you have an SSL certifcate already. If you do, goto
/usr/local/apache2/conf/ssl.conf to make the appropriate path entries.

If you havn't reached this part, Versign offers a free 2 week certificate
for you to experiment with.

I hope this helps!

Larry





On 25 Oct 2003 18:57:34 GMT, Mads Toftum <mt@dev.null> wrote:

> On Fri, 24 Oct 2003 17:11:15 +0800, Franklin Lee <pengtaoli@hotmail.com>
> wrote:
>> Hi All,
>>
>> I have one Apache Server 1.3.20 and it works well.
>> Now I want to add mod_ssl to it, but I don't want to re-compile Apache.
>> I want to compile mod_ssl to DSO libssl.so and copy it
>> /usr/local/apache/libexec.
>> Then modified http.conf to support ssl.
>> ( I have installed openssl-0.9.6)
>>
>> So there is manual or detail steps to complete this?
>>
>> Or I have to re-compile my Apache.
>>
> Most likely you'll have to recompile Apache because mod_ssl needs
> special hooks
> inserted in Apache. It is very simple to determine - if httpd -V lists
> -DEAPI
> and httpd -l lists mod_so.c, then mod_ssl can be added, if not then
> you'll
> have to recompile. Instructions for compiling and installing are in the
> mod_ssl tarball in INSTALL.
> But please note that 1.3.20 is very old and does have known security
> flaws.
> You should probably upgrade regardless of wether you're forced to it or
> not.
>
> vh
>
> Mads Toftum



--
Using M2, Opera's revolutionary e-mail client: http://www.opera.com/m2/

Hi Mads,

Yes. httpd -V lists -D EAPI and httpd -l lists mod_so.c.
My pre-compile Apache can add modules as DSO.

But Just as you said, mod_ssl may needs special operation.

So I want to know who has done this testing and where can I find some
information.

Thank you!

Franklin