Specifications

It’s time to set up OpenSSL. This is what you will use to create temporary certificates and
CSR files. The --prefix specifies the main installation directory.
Appendixes
P
ART VI
788
Only include the -L`pwd`/../rsaref-2.0/local/rsaref -fPIC’ line if you are in
the USA.
NOTE
# gunzip c openssl-0.9.x.tar.gz | tar xvf -
# cd openssl-0.9.x
# ./config --prefix=/usr/local/ssl \
-L`pwd`/../rsaref-2.0/local/rsaref -fPIC
Now make it, test it, and install it:
# make
# make test
# make install
# cd ..
We will configure the mod_SSL module and then specify it to be a loadable module with the
Apache configuration.
# gunzip -c mod_ssl-2.6.x.tar.gz |tar xvf -
# cd mod_ssl-2.5.x-1.3.x
# ./configure --with-apache=../apache_1.3.x
# cd ..
Note that we can add more Apache modules to the Apache source tree. The optional
--enable-shared=ssl option enables the building of mod_SSL as a DSO ‘libssl.so’. Read the
INSTALL and htdocs/manual/dso.html documents in the Apache source tree for more informa-
tion about DSO support in Apache. We strongly advise ISPs and package maintainers to use
the DSO facility for maximum flexibility with mod_SSL. Notice, however, that Apache does
not support DSO on all platforms.
# cd apache_1.3.x
# SSL_BASE=../openssl-0.9.x \
RSA_BASE=../rsaref-2.0/local \
./configure \
--enable-module=ssl \
--activate-module=src/modules/php4/libphp4.a \
--enable-module=php4 \
--prefix=/usr/local/apache \
--enable-shared=ssl
[...you can add more options here...]
38 7842 app a 3/6/01 3:40 PM Page 788