To integrate SSL into your web server, mm, mod_ssl and OpenSSL will have to be configured and built.
After downloading the tarballs as explained above, one may proceed to build mm (a memory management tool):
# cd /usr/local/src # tar zxvf mm-1.2.2.tar.gz # cd mm-1.2.2 # ./configure --disable-shared # make # make install
Now, onto OpenSSL, which should only be done if one does not have a recent version.
# cd /usr/local # tar zxvf openssl-0.9.7d.tar.gz # cd openssl-0.9.7d # sh config no-idea -fPIC # make depend [unless it does not ask you to do this] # make # make test
OpenSSL does not have to be installed at this point, however, issuing the command make install will install the files to /usr/local/.
Now, onto mod_ssl:
# cd /usr/local # tar zxvf mod_ssl-2.8.x.tar.gz # cd mod_ssl-2.8.x # ./configure \ --with-apache=../apache-1.3.x \ --with-ssl=../openssl-0.9.7d \ --with-mm=../mm-1.2.x \ --enable-shared=ssl \ --enable-rule=EAPI \ | tee configure_output.txt
The -enable-shared=ssl option enables the building of mod_ssl as a DSO module for Apache, libssl.so.
The -enable-rule=EAPI is required to add PHP or mod_perl support into Apache with mod_ssl!
After configure is run, messages similar to the following will be displayed:
Configuring mod_ssl/2.8.16 for Apache/1.3.29 + Apache location: ../apache_1.3.29 (Version 1.3.29) + MM location: ../mm-1.2.2 + Auxiliary patch tool: ./etc/patch/patch (local) + Applying packages to Apache source tree: . . . + SSL library version: OpenSSL 0.9.7d 17 Mar 2004
Do not proceed any further with mod_ssl just yet.
Unless Apache is upgraded, apxs will be used to upgrade the mod_ssl module. More on this can be read at the end of this document.