7.2 Configuring the packages

To integrate SSL into your web server, mm, mod_ssl and OpenSSL will have to be configured and built.

After downloading the tarballs as explained above, one may proceed to build mm (a memory management tool):

# cd /usr/local/src
# tar zxvf mm-1.2.2.tar.gz
# cd mm-1.2.2
# ./configure --disable-shared
# make
# make install

Now, onto OpenSSL, which should only be done if one does not have a recent version.

# cd /usr/local
# tar zxvf openssl-0.9.7d.tar.gz
# cd openssl-0.9.7d
# sh config no-idea -fPIC
# make depend [unless it does not ask you to do this]
# make
# make test

OpenSSL does not have to be installed at this point, however, issuing the command make install will install the files to /usr/local/.

Now, onto mod_ssl:

# cd /usr/local
# tar zxvf mod_ssl-2.8.x.tar.gz
# cd mod_ssl-2.8.x
# ./configure \
  --with-apache=../apache-1.3.x \
  --with-ssl=../openssl-0.9.7d \ 
  --with-mm=../mm-1.2.x \ 
  --enable-shared=ssl \
  --enable-rule=EAPI \
  | tee configure_output.txt

The -enable-shared=ssl option enables the building of mod_ssl as a DSO module for Apache, libssl.so.

The -enable-rule=EAPI is required to add PHP or mod_perl support into Apache with mod_ssl!

After configure is run, messages similar to the following will be displayed:

Configuring mod_ssl/2.8.16 for Apache/1.3.29
 + Apache location: ../apache_1.3.29 (Version 1.3.29)
 + MM location: ../mm-1.2.2
 + Auxiliary patch tool: ./etc/patch/patch (local)
 + Applying packages to Apache source tree:
.
.
.
      + SSL library version: OpenSSL 0.9.7d 17 Mar 2004

Do not proceed any further with mod_ssl just yet.

Unless Apache is upgraded, apxs will be used to upgrade the mod_ssl module. More on this can be read at the end of this document.