Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache Mail Archives
Rainer Jung <[email protected]> Fri, 5 Jun 2026 20:52:51 +0200
| Newsgroups | gmane.comp.apache.devel |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --------------65ai2HIPcSUWiP0DWOu8IdUc Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit Am 05.06.26 um 20:43 schrieb Steffen: > > OpenSSL 4 issue is best you report it at the list [email protected] > > .apache. > https://httpd.apache.org/lists.html#http-dev > > > > > >> Op 5 jun 2026 om 19:16 heeft Steffen <[email protected]> het >> volgende geschreven: >> >> >> Maybe some clues : >> >> https://openssl-library.org/post/2025-12-18-remove-engines/?shem=rimspwouoe, >> >>> Op 5 jun 2026 om 16:57 heeft Peter Kitson <[email protected]> het >>> volgende geschreven: >>> >>> >>> Hello Steffen, >>> >>> Ok, so my build with OpenSSL 4.0 fails. It's apr-util (1.6.3) that's >>> complaining since the ENGINE API has been removed from the OpenSSL >>> 4.0.0 libraries. >>> >>> /[ 90%] Built target aprutil-1 >>> [ 90%] Building C object >>> CMakeFiles/apr_crypto_openssl-1.dir/crypto/apr_crypto_openssl.c.obj >>> apr_crypto_openssl.c >>> [ 91%] Building RC object >>> CMakeFiles/apr_crypto_openssl-1.dir/libaprutil.rc.res >>> Microsoft (R) Windows (R) Resource Compiler Version 10.0.10011.16384 >>> Copyright (C) Microsoft Corporation. All rights reserved. >>> >>> [ 92%] Linking C shared library apr_crypto_openssl-1.dll >>> LINK: command >>> "C:\PROGRA~1\MICROS~1\18\COMMUN~1\VC\Tools\MSVC\1451~1.362\bin\Hostx64\x64\link.exe >>> /nologo @CMakeFiles\apr_crypto_openssl-1.dir\objects1.rsp >>> /out:apr_crypto_openssl-1.dll /implib:apr_crypto_openssl-1.lib >>> /pdb:C:\Development\apache24\build\apr-util\apr_crypto_openssl-1.pdb >>> /dll /version:0.0 /machine:x64 /INCREMENTAL:NO libaprutil-1.lib >>> C:\Apache24\lib\libapr-1.lib C:\Apache24\lib\libapriconv-1.lib >>> C:\Apache24\lib\libssl.lib C:\Apache24\lib\libcrypto.lib >>> C:\Apache24\lib\libexpat.lib kernel32.lib user32.lib gdi32.lib >>> winspool.lib shell32.lib ole32.lib oleaut32.lib uuid.lib >>> comdlg32.lib advapi32.lib /MANIFEST:EMBED,ID=2" failed (exit code >>> 1120) with the following output: >>> Creating library apr_crypto_openssl-1.lib and object >>> apr_crypto_openssl-1.exp >>> >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_by_id referenced in function crypto_make >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_load_builtin_engines referenced in function crypto_init >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_register_all_complete referenced in function crypto_init >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_free referenced in function crypto_cleanup >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_init referenced in function crypto_make >>> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol >>> ENGINE_finish referenced in function crypto_cleanup >>> apr_crypto_openssl-1.dll : fatal error LNK1120: 6 unresolved externals/ >>> /etc/ >>> >>> Since there no update to APR yet (or is there?), do you know of any >>> configure option for OpenSSL 4.0, to retain ENGINE API functionality >>> for now? >>> >>> Regards >>> >>> Pete >>> >>> ---------- Forwarded message --------- >>> From: *Peter Kitson* <[email protected]> >>> Date: Fri, 5 Jun 2026 at 14:57 >>> Subject: Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache >>> Mail Archives >>> To: Steffen <[email protected]> >>> >>> >>> Hmm, I'm not sure. >>> >>> Last time I tried the OpenSSL 4 series, it wouldn't link with the >>> APR libraries, due to changes to remove the ENGINE API. >>> >>> I presume that's what @nono303 refers to when his recent post >>> mentions "Fix OpenSSL 4.0 Compat" - >>> https://www.apachelounge.com/viewtopic.php?p=44373#44373 and whether >>> fix https://github.com/apache/httpd/pull/642 has found it's way into >>> the new release candidate. >>> >>> So downloading the 2.4.68-rc1, I can see this at the top of the changes: >>> >>> Changes with Apache 2.4.68 >>> *) mod_ssl, ab: Add support for OpenSSL 4.0. [Joe Orton] >>> >>> So having built the new release candidate with our current OpenSSL >>> 3.6.2, I'll repeat the build with OpenSSL 4.0.0 and see what happens. >>> >>> Regards >>> >>> Pete >>> >>> On Fri, 5 Jun 2026 at 14:05, Steffen <[email protected]> wrote: >>> >>> >>> Shall we try OpenSSL 4 , give it a try. >>> >>> Begin doorgestuurd bericht: >>> >>>> *Van:* Steffen <[email protected]> >>>> *Datum:* 5 juni 2026 om 15:01:47 CEST >>>> *Aan:* Peter Kitson <[email protected]> >>>> *Onderwerp:* *[VOTE] Release httpd-2.4.68-rc1 as >>>> httpd-2.4.68-Apache Mail Archives* >>>> >>>> >>>> https://lists.apache.org/thread/2knoyt1b68wpddyvc06ktqm55p3ryhd2 >>> The crypto code in apr-util is not yet compatible with OpenSSL 4. The same holds true for mod_md as bundled with httpd 2.4.68- If you want to build using OpenSSL 4, you would need to disable mod_md and to not enable crypto support in apr-util. As a consequence, only mod_session_crypto would not get build. I expect we will handle OpenSSL 4 support in apr-util once there will be a new release of it. The small incompatibility in mod_md will hopefully get fixed in the next httpd release. Best regards, Rainer --------------65ai2HIPcSUWiP0DWOu8IdUc Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: 8bit <!DOCTYPE html> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> </head> <body> <div class="moz-cite-prefix">Am 05.06.26 um 20:43 schrieb Steffen:<br> </div> <blockquote type="cite" cite="mid:[email protected]"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr">OpenSSL 4 issue is best you report it at the list <span style="color: rgb(255, 255, 255); font-family: system-ui;">d</span><span style="font-family: UICTFontTextStyleEmphasizedBody; font-weight: bold; -webkit-text-size-adjust: auto;"> <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a></span></div> <div dir="ltr"><span style="color: rgb(255, 255, 255); font-family: system-ui;"><br> </span></div> <div dir="ltr"><span style="color: rgb(255, 255, 255); font-family: system-ui;">.apache.</span></div> <div dir="ltr"><a href="https://httpd.apache.org/lists.html#http-dev" moz-do-not-send="true" class="moz-txt-link-freetext">https://httpd.apache.org/lists.html#http-dev</a><br> </div> <div dir="ltr"><br> </div> <div dir="ltr"><br> </div> <div dir="ltr"><br> </div> <div dir="ltr"><br> </div> <div dir="ltr"><br> <blockquote type="cite">Op 5 jun 2026 om 19:16 heeft Steffen <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a> het volgende geschreven:<br> <br> </blockquote> </div> <blockquote type="cite"> <div dir="ltr"> <meta http-equiv="content-type" content="text/html; charset=UTF-8"> <div dir="ltr">Maybe some clues :</div> <div dir="ltr"><br> </div> <div dir="ltr"><a href="https://openssl-library.org/post/2025-12-18-remove-engines/?shem=rimspwouoe," moz-do-not-send="true" class="moz-txt-link-freetext">https://openssl-library.org/post/2025-12-18-remove-engines/?shem=rimspwouoe,</a></div> <div dir="ltr"><br> <blockquote type="cite">Op 5 jun 2026 om 16:57 heeft Peter Kitson <a class="moz-txt-link-rfc2396E" href="mailto:[email protected]"><[email protected]></a> het volgende geschreven:<br> <br> </blockquote> </div> <blockquote type="cite"> <div dir="ltr"> <div dir="ltr"> <div>Hello Steffen,</div> <div><br> </div> <div>Ok, so my build with OpenSSL 4.0 fails. It's apr-util (1.6.3) that's complaining since the ENGINE API has been removed from the OpenSSL 4.0.0 libraries.</div> <div><br> </div> <div style="margin-left:40px"><i>[ 90%] Built target aprutil-1<br> [ 90%] Building C object CMakeFiles/apr_crypto_openssl-1.dir/crypto/apr_crypto_openssl.c.obj<br> apr_crypto_openssl.c<br> [ 91%] Building RC object CMakeFiles/apr_crypto_openssl-1.dir/libaprutil.rc.res<br> Microsoft (R) Windows (R) Resource Compiler Version 10.0.10011.16384<br> Copyright (C) Microsoft Corporation. All rights reserved.<br> <br> [ 92%] Linking C shared library apr_crypto_openssl-1.dll<br> LINK: command "C:\PROGRA~1\MICROS~1\18\COMMUN~1\VC\Tools\MSVC\1451~1.362\bin\Hostx64\x64\link.exe /nologo @CMakeFiles\apr_crypto_openssl-1.dir\objects1.rsp /out:apr_crypto_openssl-1.dll /implib:apr_crypto_openssl-1.lib /pdb:C:\Development\apache24\build\apr-util\apr_crypto_openssl-1.pdb /dll /version:0.0 /machine:x64 /INCREMENTAL:NO libaprutil-1.lib C:\Apache24\lib\libapr-1.lib C:\Apache24\lib\libapriconv-1.lib C:\Apache24\lib\libssl.lib C:\Apache24\lib\libcrypto.lib C:\Apache24\lib\libexpat.lib kernel32.lib user32.lib gdi32.lib winspool.lib shell32.lib ole32.lib oleaut32.lib uuid.lib comdlg32.lib advapi32.lib /MANIFEST:EMBED,ID=2" failed (exit code 1120) with the following output:<br> Creating library apr_crypto_openssl-1.lib and object apr_crypto_openssl-1.exp<br> <br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_by_id referenced in function crypto_make<br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_load_builtin_engines referenced in function crypto_init<br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_register_all_complete referenced in function crypto_init<br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_free referenced in function crypto_cleanup<br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_init referenced in function crypto_make<br> apr_crypto_openssl.c.obj : error LNK2019: unresolved external symbol ENGINE_finish referenced in function crypto_cleanup<br> apr_crypto_openssl-1.dll : fatal error LNK1120: 6 unresolved externals</i></div> <div style="margin-left:40px"><i>etc</i></div> <div><br> </div> <div>Since there no update to APR yet (or is there?), do you know of any configure option for OpenSSL 4.0, to retain ENGINE API functionality for now?</div> <div><br> </div> <div>Regards</div> <div><br> </div> <div>Pete</div> <div><br> <div class="gmail_quote gmail_quote_container"> <div dir="ltr" class="gmail_attr">---------- Forwarded message ---------<br> From: <b class="gmail_sendername" dir="auto">Peter Kitson</b> <span dir="auto"><<a href="mailto:[email protected]" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>></span><br> Date: Fri, 5 Jun 2026 at 14:57<br> Subject: Re: [VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache Mail Archives<br> To: Steffen <<a href="mailto:[email protected]" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>><br> </div> <br> <br> <div dir="ltr"> <div>Hmm, I'm not sure.</div> <div><br> </div> <div>Last time I tried the OpenSSL 4 series, it wouldn't link with the APR libraries, due to changes to remove the ENGINE API.</div> <div><br> </div> <div>I presume that's what @nono303 refers to when his recent post mentions "Fix OpenSSL 4.0 Compat" - <a href="https://www.apachelounge.com/viewtopic.php?p=44373#44373" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://www.apachelounge.com/viewtopic.php?p=44373#44373</a> and whether fix <a href="https://github.com/apache/httpd/pull/642" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://github.com/apache/httpd/pull/642</a> has found it's way into the new release candidate.</div> <div><br> </div> <div> <div>So downloading the 2.4.68-rc1, I can see this at the top of the changes:</div> <div><br> </div> <div> <div style="margin-left:40px">Changes with Apache 2.4.68<br> *) mod_ssl, ab: Add support for OpenSSL 4.0. [Joe Orton]<br> </div> <br> </div> So having built the new release candidate with our current OpenSSL 3.6.2, I'll repeat the build with OpenSSL 4.0.0 and see what happens.</div> <div><br> </div> <div>Regards</div> <div><br> </div> <div>Pete</div> </div> <br> <div class="gmail_quote"> <div dir="ltr" class="gmail_attr">On Fri, 5 Jun 2026 at 14:05, Steffen <<a href="mailto:[email protected]" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>> wrote:<br> </div> <blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"> <div dir="auto"> <div dir="ltr"><br> Shall we try OpenSSL 4 , give it a try. <br> <br> Begin doorgestuurd bericht:<br> <br> </div> <blockquote type="cite"> <div dir="ltr"><b>Van:</b> Steffen <<a href="mailto:[email protected]" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>><br> <b>Datum:</b> 5 juni 2026 om 15:01:47 CEST<br> <b>Aan:</b> Peter Kitson <<a href="mailto:[email protected]" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">[email protected]</a>><br> <b>Onderwerp:</b> <b>[VOTE] Release httpd-2.4.68-rc1 as httpd-2.4.68-Apache Mail Archives</b><br> <br> </div> </blockquote> <blockquote type="cite"> <div dir="ltr"><span></span><br> <span><a href="https://lists.apache.org/thread/2knoyt1b68wpddyvc06ktqm55p3ryhd2" target="_blank" moz-do-not-send="true" class="moz-txt-link-freetext">https://lists.apache.org/thread/2knoyt1b68wpddyvc06ktqm55p3ryhd2</a></span></div> </blockquote> </div> </blockquote> </div> </div> </div> </div> </div> </blockquote> </div> </blockquote> </div> </div> </div> </blockquote> <p>The crypto code in apr-util is not yet compatible with OpenSSL 4. The same holds true for mod_md as bundled with httpd 2.4.68-</p> <p>If you want to build using OpenSSL 4, you would need to disable mod_md and to not enable crypto support in apr-util. As a consequence, only mod_session_crypto would not get build.</p> <p>I expect we will handle OpenSSL 4 support in apr-util once there will be a new release of it. The small incompatibility in mod_md will hopefully get fixed in the next httpd release.</p> <p>Best regards,</p> <p>Rainer</p> </body> </html> --------------65ai2HIPcSUWiP0DWOu8IdUc--