Bug 265354

Summary: www/apache24 with OpenSSL, httpd using base, mod_ssl using ports.
Product: Ports & Packages Reporter: epopen
Component: Individual Port(s)Assignee: freebsd-apache (Nobody) <apache>
Status: Closed FIXED    
Severity: Affects Only Me CC: rootservice, t.masub
Priority: --- Flags: bugzilla: maintainer-feedback? (apache)
Version: Latest   
Hardware: amd64   
OS: Any   

Description epopen 2022-07-21 09:56:00 UTC
Hi Maintainer.

OpenSSL version of base: 1.1.1o

Today, upgrade www/apache24 under ports version of openssl-1.1.1q,1
(DEFAULT_VERSIONS+=ssl=openssl @ /etc/make.conf)

But got error message when start as follows.
    [Thu Jul 21 15:00:02.154970 2022] [ssl:warn] [pid 84474:tid 34378686464] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 1.1.1q  5 Jul 2022, version currently loaded is OpenSSL 1.1.1o-freebsd  3 May 2022) - may result in undefined or erroneous behavior

mod_ssl.so using base version of openssl as follows, it is correct.
# ldd /usr/local/libexec/apache24/mod_ssl.so
        libssl.so.11 => /usr/local/lib/libssl.so.11 (0x8014c6000)
        libcrypto.so.11 => /usr/local/lib/libcrypto.so.11 (0x801e00000)

But httpd using base version of openssl as follows.
# ldd /usr/local/sbin/httpd 
        libssl.so.111 => /usr/lib/libssl.so.111 (0x800a80000)
        libcrypto.so.111 => /lib/libcrypto.so.111 (0x800b18000)

I checked variable ${OPENSSLBASE} = /usr/local @ Makefile
Tried to remove/install both devel/apr1 and www/apache24 does not fix.

Thanks a lot.
Comment 1 Markus Kohlmeyer 2022-08-03 20:55:59 UTC
This is caused by BerkeleyDB linked against OpenSSL from Base, which is linked in by devel/apr1 (Option BDB activated).

Current workaround is to deactivate BDB in devel/apr1 and rebuild apr1 and all Ports that depend on it, including apache.
Comment 2 epopen 2022-08-04 02:45:13 UTC
(In reply to Markus Kohlmeyer from comment #1)

Thanks your workaround, whole result as follows.
/usr/local/sbin/httpd:
        libpcre2-8.so.0 => /usr/local/lib/libpcre2-8.so.0 (0x8002e9000)
        libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0 (0x8003a0000)
        libgdbm.so.6 => /usr/local/lib/libgdbm.so.6 (0x8003d0000)
        libexpat.so.1 => /usr/local/lib/libexpat.so.1 (0x8003e3000)
        libapr-1.so.0 => /usr/local/lib/libapr-1.so.0 (0x800413000)
        libcrypt.so.5 => /lib/libcrypt.so.5 (0x800454000)
        libthr.so.3 => /lib/libthr.so.3 (0x800475000)
        libc.so.7 => /lib/libc.so.7 (0x8004a3000)
        libintl.so.8 => /usr/local/lib/libintl.so.8 (0x8008a5000)
        libm.so.5 => /lib/libm.so.5 (0x8008b3000)
Comment 3 Toshimichi Masubuchi 2023-01-27 12:52:14 UTC
FYI: This issue is resolved with the fix in bug #264520.
Comment 4 epopen 2023-01-27 15:01:03 UTC
(In reply to Toshimichi Masubuchi from comment #3)
Thanks your news.

I tried to rebuild databases/db18, reactivate BDB in devel/apr1 and rebuild apr1 and all Ports that depend on it, including apache, result as follows.
# ldd /usr/local/sbin/httpd
/usr/local/sbin/httpd:
        libpcre2-8.so.0 => /usr/local/lib/libpcre2-8.so.0 (0x8002e9000)
        libaprutil-1.so.0 => /usr/local/lib/libaprutil-1.so.0 (0x80039a000)
        libdb-18.1.so => /usr/local/lib/libdb-18.1.so (0x8003ca000)
        libgdbm.so.6 => /usr/local/lib/libgdbm.so.6 (0x8005a5000)
        libexpat.so.1 => /usr/local/lib/libexpat.so.1 (0x8005b8000)
        libapr-1.so.0 => /usr/local/lib/libapr-1.so.0 (0x8005e8000)
        libcrypt.so.5 => /lib/libcrypt.so.5 (0x800629000)
        libthr.so.3 => /lib/libthr.so.3 (0x80064a000)
        libc.so.7 => /lib/libc.so.7 (0x800678000)
        libssl.so.11 => /usr/local/lib/libssl.so.11 (0x800a7a000)
        libcrypto.so.11 => /usr/local/lib/libcrypto.so.11 (0x800b10000)
        libintl.so.8 => /usr/local/lib/libintl.so.8 (0x800e03000)
        libm.so.5 => /lib/libm.so.5 (0x800e11000)

The bug fixed.
Thanks all very much.