| View previous topic :: View next topic |
| Author |
Message |
ventura57
n00b
Joined: 04 Dec 2023
Posts: 4
|
 Posted: Mon Dec 04, 2023 10:13 pm Post subject: Apache using openssl-compat |
 |
|
How can I force Apache to compile with openssl-compat instead of openssl 3 ?
Ventura |
|
| Back to top |
|
 |
Ionen
Developer
Joined: 06 Dec 2018
Posts: 2732
|
| Posted: Mon Dec 04, 2023 10:18 pm Post subject: |
|
|
openssl-compat can't be compiled against as-is, it only provide the library for compatibility with prebuilt binaries and lacks other files (e.g. no headers)
Last edited by Ionen on Tue Dec 05, 2023 7:47 am; edited 1 time in total |
|
| Back to top |
|
|
Hu
Administrator
Joined: 06 Mar 2007
Posts: 21918
|
| Posted: Mon Dec 04, 2023 11:02 pm Post subject: |
|
|
| What are you trying to do that you want to use openssl-compat? Apache itself should be fine with openssl-3. |
|
| Back to top |
|
|
ventura57
n00b
Joined: 04 Dec 2023
Posts: 4
|
| Posted: Fri Dec 08, 2023 6:28 pm Post subject: |
|
|
| Hu wrote: | | What are you trying to do that you want to use openssl-compat? Apache itself should be fine with openssl-3. |
I need to have apache working with openssl-1.1.1, it's a requirement in my problem. |
|
| Back to top |
|
|
grknight
Retired Dev
Joined: 20 Feb 2015
Posts: 1744
|
| Posted: Fri Dec 08, 2023 7:43 pm Post subject: |
|
|
| ventura57 wrote: | | I need to have apache working with openssl-1.1.1, it's a requirement in my problem. |
X-Y Problem: You need to do X so you conclude you need Y. But you don't know how to do Y either. Just ask us about X. |
|
| Back to top |
|
|
miket
Guru
Joined: 28 Apr 2007
Posts: 489
Location: Gainesville, FL, USA
|
| Posted: Thu Dec 14, 2023 5:40 am Post subject: |
|
|
| grknight wrote: | | ventura57 wrote: | | I need to have apache working with openssl-1.1.1, it's a requirement in my problem. |
X-Y Problem: You need to do X so you conclude you need Y. But you don't know how to do Y either. Just ask us about X. |
Indeed. There are several packages I keep at older versions and so might have to keep older dependencies around but... I don't do that when the dependencies are critical security packages that are begging to be upgraded.
Case in point. I keep old versions of PHP so I can test how scripts run on older versions. When the news item came out a few months ago that PHP versions older than 8.1 were not compatible with the new OpenSSL 3 and that the presence of those versions on my system would block the OpenSSL upgrade, I didn't hesitate a bit to remove the ssl USE flag from those older versions and re-emerge them so that I could get the Open SSL upgrade. I can still run those older versions of PHP and would not be likely to miss the SSL support in them.
---
Edit to add: come to think of it, there wasn't an actual news item. It was just that when reviewing the proposed list of packages for a world update that I noted it was skipping a huge version bump for openssl. That's when I looked into what was holding it back and then decided that I cared a lot more for security than for having SSL support in those old PHP versions. I canceled the update and edited package.use to set the ssl USE flag only for versions greater than or equal to 8.1. After that, the package list for the world update showed the openssl version bump.
Last edited by miket on Thu Dec 14, 2023 3:18 pm; edited 1 time in total |
|
| Back to top |
|
|
grknight
Retired Dev
Joined: 20 Feb 2015
Posts: 1744
|
| Posted: Thu Dec 14, 2023 1:31 pm Post subject: |
|
|
| miket wrote: | | grknight wrote: | | ventura57 wrote: | | I need to have apache working with openssl-1.1.1, it's a requirement in my problem. |
X-Y Problem: You need to do X so you conclude you need Y. But you don't know how to do Y either. Just ask us about X. |
Indeed. There are several packages I keep at older versions and so might have to keep older dependencies around but... I don't do that when the dependencies are critical security packages that are begging to be upgraded.
Case in point. I keep old versions of PHP so I can test how scripts run on older versions. When the news item came out a few months ago that PHP versions older than 8.1 were not compatible with the new OpenSSL 3 and that the presence of those versions on my system would block the OpenSSL upgrade, I didn't hesitate a bit to remove the ssl USE flag from those older versions and re-emerge them so that I could get the Open SSL upgrade. I can still run those older versions of PHP and would not be likely to miss the SSL support in them. |
PHP only needs OpenSSL 1.1.x if you use the openssl extension or one of its 3 or 4 dependencies (like soap iirc). Very few scripts actually need this and it can be turned off without issue in 95% of cases.
Edit: PHP modules that can utilize dev-lang/php ssl USE: openssl, ftp, imap, mysqlnd and phar. curl extension won't care |
|
| Back to top |
|
|
|
Other Things Gentoo
