hi mike,

thank you very very much for taking the time to share your knowledge. here's
the configuration of debian etch:

ld.so.conf =
include /etc/ld.so.conf.d/*.conf

in ld.so.conf.d = i486-linux-gnu.conf
# Multiarch support
/lib/i486-linux-gnu
/usr/lib/i486-linux-gnu


i've put /usr/local/lib in ld.so.conf _before_ the include.
apt-get --reinstall install openssl libssl0.9.8 libssl-dev
ldconfig even rebooting
now in /usr/lib/i686/cmov = old library

so recompile openssl with --prefix=/usr/local
recompile apache --enable-ssl --with-ssl=/usr/local

ldd httpd =
linux-gate.so.1 => (0xffffe000)
libz.so.1 => /usr/lib/libz.so.1 (0xb7f10000)
libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7ed0000)
libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8
(0xb7d96000)
libm.so.6 => /lib/tls/i686/cmov/libm.so.6 (0xb7d71000)
libaprutil-1.so.0 => /virtual/apache/lib/libaprutil-1.so.0
(0xb7d55000)
libexpat.so.0 => /virtual/apache/lib/libexpat.so.0 (0xb7d39000)
libapr-1.so.0 => /virtual/apache/lib/libapr-1.so.0 (0xb7d14000)
librt.so.1 => /lib/tls/i686/cmov/librt.so.1 (0xb7d0a000)
libcrypt.so.1 => /lib/tls/i686/cmov/libcrypt.so.1 (0xb7cdc000)
libpthread.so.0 => /lib/tls/i686/cmov/libpthread.so.0 (0xb7cca000)
libdl.so.2 => /lib/tls/i686/cmov/libdl.so.2 (0xb7cc6000)
libc.so.6 => /lib/tls/i686/cmov/libc.so.6 (0xb7b95000)
/lib/ld-linux.so.2 (0xb7f2c000)

still pointing to /usr/lib/i686/cmov/
apache won't start (new openssl, old library)
[Fri Oct 24 10:35:14 2008] [warn] Init: Session Cache is not configured
[hint: SSLSessionCache]
/virtual/apache/bin/httpd: symbol lookup error: /virtual/apache/bin/httpd:
undefined symbol: SSL_CTX_sess_set_new_cb

printenv
....
PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/bin/X11
....
no LD_LIBRARY_PATH

for now, i just redo the cp new openssl libs to /usr/lib/i686/cmov. but, i
don't like this solution...

pat

__________________________________________________ ____________________
OpenSSL Project http://www.openssl.org
User Support Mailing List openssl-users@openssl.org
Automated List Manager majordomo@openssl.org