Keep Server Online
If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.
or
A donation makes a contribution towards the costs, the time and effort that's going in this site and building.
Thank You! Steffen
Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
| |
|
 Topic: Errors with md_crypt compiling latest 2.4.60/61 on RHEL7 |
|
| Author |
|
chrisl
Joined: 04 Jul 2024
Posts: 1
|
 Posted: Fri 05 Jul '24 16:51 Post subject: Errors with md_crypt compiling latest 2.4.60/61 on RHEL7 |
 |
|
I've been trying to compile the latest 2.4.60/61 release of Apache on RHEL7. This results in the md_crypt.c errors below.. I tested compiling on both RHEL8/9, which works fine.. I also testing compiling on RHEL7 with the previous 2.4.59 release, which worked fine as well..
Has anyone run into this issue or heard of any changes in the new releases that are incompatible with RHEL7? The change notes for the releases just list bug fixes and CVE remediation..
I'm at a loss as to what could be the issue here so any pointers would be appreciated!
| Code: | md_crypt.c: In function 'md_cert_get_ct_scts':
md_crypt.c:2071:5: error: unknown type name 'SCT'
SCT *sct_handle;
^
In file included from /usr/include/openssl/crypto.h:129:0,
from /usr/include/openssl/bio.h:69,
from /usr/include/openssl/err.h:124,
from md_crypt.c:28:
md_crypt.c:2084:29: error: 'SCT' undeclared (first use in this function)
sct_handle = sk_SCT_value(sct_list, i);
^
md_crypt.c:2084:29: note: each undeclared identifier is reported only once for each function it appears in
md_crypt.c:2084:29: error: expected expression before ')' token
sct_handle = sk_SCT_value(sct_list, i);
^
md_crypt.c:2087:21: warning: implicit declaration of function 'SCT_get_version' [-Wimplicit-function-declaration]
sct->version = SCT_get_version(sct_handle);
^
md_crypt.c:2088:21: warning: implicit declaration of function 'SCT_get_timestamp' [-Wimplicit-function-declaration]
sct->timestamp = apr_time_from_msec(SCT_get_timestamp(sct_handle));
^
md_crypt.c:2089:21: warning: implicit declaration of function 'SCT_get0_log_id' [-Wimplicit-function-declaration]
len = SCT_get0_log_id(sct_handle, (unsigned char**)&data);
^
md_crypt.c:2091:21: warning: implicit declaration of function 'SCT_get_signature_nid' [-Wimplicit-function-declaration]
sct->signature_type_nid = SCT_get_signature_nid(sct_handle);
^
md_crypt.c:2092:21: warning: implicit declaration of function 'SCT_get0_signature' [-Wimplicit-function-declaration]
len = SCT_get0_signature(sct_handle, (unsigned char**)&data);
^
make[4]: *** [md_crypt.slo] Error 1 |
|
|
| Back to top |
|
tangent
Moderator
Joined: 16 Aug 2020
Posts: 348
Location: UK
|
| Posted: Sun 07 Jul '24 20:24 Post subject: |
|
|
I don't have access to an RHEL 7 environment, but I'd speculate you have an old version of OpenSSL (probably 1.x series), e.g.
| Code: | $ openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017 |
If that's the case it may well be the cause of your Signed Certificate Timestamp (SCT) problems when building the latest Apache.
Since RHEL 7 is now End of Life, you'll need to install an updated OpenSSL if you want to keep Apache builds up to date. A quick search on the net reveals the following link on how to install OpenSSL 3.x on RHEL 7 (if that is indeed your problem) - https://computingforgeeks.com/how-to-install-openssl-3-x-on-centos-rhel-7
Let us know how you get on. |
|
| Back to top |
|
TydalForce
Joined: 09 Oct 2024
Posts: 1
Location: Philadelphia, PA, USA
|
| Posted: Wed 09 Oct '24 20:04 Post subject: |
|
|
I ran into the same problem trying to compile httpd-2.4.62 on Oracle Linux 7. This post was the only truly matching result in my search! Strangely, I got it to work on one system, but not another, and haven't pinned down the difference - and the suggestion to install OpenSSL 3 isn't currently an option where I need it. I did find a workaround, so I hope this helps you (or the next person to come along!)
The error's coming from compiling the mod_md module. We don't actually need this; disabling it with --disable-md during configure allowed the build to complete successfully
| Code: | | configure --disable-md |
Hope that helps! |
|
| Back to top |
|
|
|
|
|
|
