On Thu October 23 2008, patrick wrote:
> hi all,
>
> it's now working (including apache / mod-ssl). i had to:
>
> ------------------
> debian etch
> ------------------
> openssl
> ./config --prefix=/usr/local --openssldir=/etc/ssl shared threads
>
> apache
> ./configure ...... --enable-ssl --with-ssl=/usr/local
>
> BUT i had to replace the libs in /usr/lib/i686/cmov (ssl / crypto) with the
> new ones (found in /usr/local/lib/). found this with ldd httpd. i don't know
> if it will mess my system... any debian user?
>


The obvious thing to do is check the directroy search list in
/etc/ld.so.conf which is either a list of directories for the loader
to search, or one or more "include" statements of directories that
contain the list fragments.

The non-obvious thing to check is the default search list compiled
into the loader. You might have to apt-get source the version of glibc
your using to find that.

In glibc-2.7 for Debian/Lenny - Debian patches the default search list:
Standard default:
/lib
/usr/lib
Debian addition by patch:
/usr/local/lib

Those "default" directories are searched _after_ the configuration listed
directories.

The description of your change tells me that /usr/lib/i686/cmov gets searched
_prior_ to the default /usr/local/lib - either by a text entry in ld.so.conf
or one of the directories in conf includes or by a patch to glibc.

Physically moving the libraries leaves the installation "out of sync" with
where your package manager "thinks" it put the most recent update.

Better that you put them back, and edit the config file.
Which, because of the prefix you specified when you built the libraries,
means putting /usr/local/lib early rather than late in the search.
Now that might break things.

Take a deep breath, undo what you have done,
rebuild with a --prefix=/something/for/my/custom/libraries
then, after the install process, if the makefile did not put
your custom directory into ld.so.conf (or put it in the wrong place)
hand edit ld.so.conf to put your custom directory early in the
search order; then run ld.config; that should fix you up.

Mike
> pat
>
>
>
> __________________________________________________ ____________________
> OpenSSL Project http://www.openssl.org
> User Support Mailing List openssl-users@openssl.org
> Automated List Manager majordomo@openssl.org
>
>



__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org