How Can I Add mod_ssl to Built In Apache Server?

Question

Hi,
I would like to add mod_ssl as a DSO module to the Apache web server that comes with Solaris 9. However I have been unable to find any decent instructions on how to do so. Any help would be appreciated. I have included below a post I have made to a newsgroup which summarises what I have tried so far.
---Newsgroup Post---
I have been following the instructions for adding mod_ssl to the integrated httpd server in Solaris that was posted here last year (a copy is included below). I am attempting to install mod_ssl onto a Solaris 9 system and I am using the relevant version of mod_ssl. It is my preferance to do it this way, retaining the included version of httpd, rather than to install the web server from another source.
Anyway, after following the instructions below I have attepted to launch the htppd server and receive the following error message:
Syntax error on line 252 of /etc/apache/httpd.conf:
Cannot load /usr/apache/libexec/libssl.so into server: ld.so.1: /usr/apache/bin/httpd: fatal: relocation error: file /usr/apache/libexec/libssl.so: symbol __umoddi3: referenced symbol not found
./apachectl start: httpd could not be started
Can anyone tell me how I might resolve this problem?
Regards,
Bernard Lineham
---Previous Message---
Well, first of all, why are you using the Sun Freeware apache? Solaris 8
ships with apache as well, and if you're up-to-date with your patches,
you will have 1.3.26 and Sun will take care of backporting any security
issues.
Here is my procedure for adding SSL support to the Sun Apache:
1. Make sure you have the the SUNWapchr and SUNWapchu packages installed.
2. Make sure you have the latest Apache patch from Sun installed. For
Solaris 8, that would be patch number 109234 (get the highest revision).
3. You need to have OpenSSl installed.
4. Now unpack the modssl-distribution (you will need the one that goes
with your apache-version, in this case 2.8.9)
5. ./configure with-apxs=/usr/apache/bin/apxs with-ssl=SYSTEM
6. You should patch line 23 of pkg.sslmod/Makefile to read:
SSL_LDFLAGS=-L$(SSL_LIBDIR) -R$(SSL_LIBDIR)
This ensures that your modssl will be able to find openssl later on.
7. make
You could now take the file pkg.sslmod/libssl.so and dump it in
/usr/apache/libexec, then add the appropriate statements to your
httpd.conf. But for extra bonus points, we're going to make a package
instead.
Create a file called 'prototype' in the mod-ssl directory, with these
contents:
f none /usr/apache/libexec/libssl.so=pkg.sslmod/libssl.so 755 root other
i ./pkginfo
Create a file called 'pkginfo' in the mod-ssl directory with these contents:
PKG=Apmodssl
NAME=Apache modssl
ARCH=sparc
VERSION=2.8.9
CATEGORY=system
VENDOR=none
[email protected]
CLASSES=none
(you might want to change the 'email' setting
Now run 'pkgmk -o' and you will find your new package in /var/spool/pkg.
To install (only now do we need root permissions):
pkgadd Apmodssl
If you were to install mod-ssl the 'regular' way (recompiling all of
apache etc) it would modify the httpd.conf for you, quite extensively.
This procedure (on purpose) does not modify the httpd.conf at all.
Some of the changes you will need to activate your modssl are:
Add a 'LoadModule ssl_module libexec/libssl.so'
If your httpd.conf has a ClearModule statement, and then a bunch of
AddModule statements, do as the Romans do and add:
'Addmodule mod_ssl.c'
Add to the type-specifications:
'AddType application/x-x509-ca-cert .crt'
'AddType application/x-pkcs7-crl .crl'
'Listen 80 443'
And a -lot- of SSL specific statments that is a bit much to reproduce
here. Mail me if you get this far. Or run a diff between a pristine
httpd.conf and one mangled by modssl.
Now this all works because Sun explicitly compiled their Apache to work
this way. If you want to know all the flags they used, install the Sun
package SUNWapchS (and reinstall the Apache patch so your sources are up
to date, too). Then look in /usr/src/apache/README.sfw which tells how
they compiled their apache. The procedure above might just as well work
for the SunFreeware version, -if- they compiled with EAPI and
--enable-shared.<br />
Hope this helps a bit.
Regards, Paul Boven.

Answer 1

The version of Apache that comes default with Solaris might not be compiled for that I am not positive though. I downloaded and compiled Apach 2 and compiled mod_ssl and got it working with no problems you might want to try that.