Apache2 won't start - Can't load mod_ca, libssl missing

[fincoop]

Hello all,

I'm not sure what changed, perhaps the migration to OpenSSL 3.x, but Apache refuses to start and throws this error:

Code: Select all

 rc-service apache2 start
 * Caching service dependencies                                                                                                                                                                                                                                                                                                                                                                         
 * apache2 has detected an error in your setup:
apache2: Syntax error on line 165 of /etc/apache2/httpd.conf: Syntax error on line 13 of /etc/apache2/vhosts.d/00_default_ssl_vhost.conf: Syntax error on line 94 of /etc/apache2/vhosts.d/default_vhost.include: Cannot load /usr/lib64/apache2/modules/mod_ca.so into server: libssl.so.1.1: cannot open shared object file: No such file or directory
 * ERROR: apache2 failed to start

I've tried a re-emerge with full dependencies (empty tree) for Apache and OpenSSL. Can anyone offer some advice to troubleshoot or resolve? TIA

[NeddySeagoon]

fincoop,

Code: Select all

apache2: Syntax error on line 165 of /etc/apache2/httpd.conf

Fix the errors one at a time starting with the first reported error.
Subsequent errors can be the result of the first error.

That syntax error may be just before line 165. That's when it was detected,

[fincoop]

fincoop,

Code: Select all

apache2: Syntax error on line 165 of /etc/apache2/httpd.conf

Fix the errors one at a time starting with the first reported error.
Subsequent errors can be the result of the first error.

That syntax error may be just before line 165. That's when it was detected,

Thanks for the suggestion. I have followed the trail already. It’s the same error. It says I can’t find libssl, but you wanted me to load mod_ca, and that load was in an include file, and the include file was in a conf file.

[Hu]

The output says mod_ca depends on OpenSSL 1.1.x. Was this module rebuilt after migrating to OpenSSL 3?

[fincoop]

The output says mod_ca depends on OpenSSL 1.1.x. Was this module rebuilt after migrating to OpenSSL 3?

I am not sure if it was rebuilt. I did an empty tree build of Apache and verified that the ssl use flag is set. Is there another procedure to compile this module ?

[grknight]

The output says mod_ca depends on OpenSSL 1.1.x. Was this module rebuilt after migrating to OpenSSL 3?

I am not sure if it was rebuilt. I did an empty tree build of Apache and verified that the ssl use flag is set. Is there another procedure to compile this module ?

mod_ca is not a part of apache or anywhere I can find in Gentoo. It is not listed on Apache's site either. The only reference I can find is part of something called "Redwax server"

[fincoop]

The output says mod_ca depends on OpenSSL 1.1.x. Was this module rebuilt after migrating to OpenSSL 3?

I am not sure if it was rebuilt. I did an empty tree build of Apache and verified that the ssl use flag is set. Is there another procedure to compile this module ?

mod_ca is not a part of apache or anywhere I can find in Gentoo. It is not listed on Apache's site either. The only reference I can find is part of something called "Redwax server"

Thanks for checking that!

I unmerged apache, and inside of the modules directory only these files remained:

Code: Select all

-rwxr-xr-x 1 root root  52K Apr 18  2022 mod_ca_crl.so*
-rwxr-xr-x 1 root root  98K Apr 18  2022 mod_ca_disk.so*
-rwxr-xr-x 1 root root  91K Apr 18  2022 mod_ca_engine.so*
-rwxr-xr-x 1 root root  95K Apr 18  2022 mod_ca_ldap.so*
-rwxr-xr-x 1 root root  97K Apr 18  2022 mod_ca_simple.so*
-rwxr-xr-x 1 root root  52K Apr 18  2022 mod_ca.so*
-rwxr-xr-x 1 root root  88K Apr 18  2022 mod_csr.so*
lrwxrwxrwx 1 root root   31 Jun 24  2022 mod_php.so -> ../../php8.1/apache2/libphp8.so
-rwxr-xr-x 1 root root 169K Apr 18  2022 mod_scep.so*

Maybe I added them at some point as part of a project I was doing and forgot. I'll just clean them out and carry on Documenting here in case anyone looks up this issue in the future.

Cheers!

[grknight]

I unmerged apache, and inside of the modules directory only these files remained

It is a bit extreme to nuke a package to check files. Next time just try qfile -o /usr/lib64/apache2/modules/mod_* for example (this lists files not installed by emerge).

[fincoop]

I unmerged apache, and inside of the modules directory only these files remained

It is a bit extreme to nuke a package to check files. Next time just try qfile -o /usr/lib64/apache2/modules/mod_* for example (this lists files not installed by emerge).

Thanks!