New Ticket     Tickets     Wiki     Browse Source     Timeline     Roadmap     Ticket Reports     Search

Ticket #11755 (closed enhancement: worksforme)

Opened 6 years ago

Last modified 4 years ago

RFE: www/apache2 +openssl97 variant to fix bug

Reported by: ecronin@… Owned by: imajes@…
Priority: Low Milestone:
Component: ports Version:
Keywords: Cc:
Port: apache2

Description

OpenSSL 0.9.8 (security/openssl) seems to have a known mis-interaction with Apache and large uploads, which is particularly exercised by Subversion. see <http://subversion.tigris.org/faq.html#ssl-negotiation-error> for a less than helpful confirmation.

Since OpenSSL 0.9.8 hasn't been fixed, the attached patch adds a +openssl97 variant to apache2 which I can confirm fixes the inability to commit large files into Subversion. It is uglier than I would like, but because /opt/local gets looked at before /opt/local/lib/openssl97/ it is necessary that the openssl port be deactivated for the configure and build of apache2 +openssl97 to pick the correct library. Additionally, I'm using the internal registry_active API to check that this is the case. I'm not opposed to someone smarter than me at Portfiles fixing any of these problems.

Attachments

apache2.patch (979 bytes) - added by ecronin@… 6 years ago.

Change History

Changed 6 years ago by ecronin@…

comment:1 Changed 6 years ago by nox@…

  • Priority changed from Nice to have to Low
  • Version 1.4 deleted

comment:2 Changed 5 years ago by tabithamc@…

Please see my amendment to Ticket #13182. The openssl97 port is probably not needed any more (unless the Subversion problem with OpenSSL 0.9.8 is independent of the symbols error with Apache2 as described in more detail in Ticket #13182).

If OpenSSL 0.9.8 can be used successfully with Apache2 and Subversion, I would suggest that the openssl97 port be deprecated.

comment:3 Changed 5 years ago by ecronin@…

  • Cc ecronin@… added; ecronin@… removed

Yes, this ticket addresses a runtime issue between apache+mod_dav_svn and openssl 0.9.8. I haven't rebuilt apache on the production machine in several months so I'm unsure if the current letter revision of 0.9.8 has resolved the issue, but it is orthogonal to the problem in ticket #13182.

comment:4 Changed 4 years ago by anonymous

  • Milestone Port Enhancements deleted

Milestone Port Enhancements deleted

comment:5 follow-up: ↓ 6 Changed 4 years ago by toby@…

Is this still an issue?

comment:6 in reply to: ↑ 5 Changed 4 years ago by jmr@…

  • Keywords apache subversion openssl removed
  • Cc imajes@…, ecronin@… removed
  • Status changed from new to closed
  • Resolution set to worksforme
  • Port set to apache2

Replying to toby@…:

Is this still an issue?

Assuming not.

Note: See TracTickets for help on using tickets.