ports/151085: Build Apache 2.2 with SNI-enabled OpenSSL

Julian Mehnle julian at mehnle.net
Wed Sep 29 19:20:02 UTC 2010


>Number:         151085
>Category:       ports
>Synopsis:       Build Apache 2.2 with SNI-enabled OpenSSL
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-ports-bugs
>State:          open
>Quarter:        
>Keywords:       
>Date-Required:
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Wed Sep 29 19:20:02 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator:     Julian Mehnle
>Release:        6.3-STABLE
>Organization:
>Environment:
FreeBSD <host> 6.3-STABLE FreeBSD 6.3-STABLE #1: Fri May 30 18:11:47 PDT 2008     root@<host>:<path>/symbols/builddir_amd64/usr/src/sys/MESSAGING_GATEWAY.amd64_INSTALL  amd64

>Description:
I have apache-2.2.16_1 and openssl-1.0.0_2 installed, which should be capable of supporting TLS Name Server Indication (SNI).

http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI

However, when I add the "SSLStrictSNIVHostCheck" directive to my httpd.conf and restart Apache, it says:

  SSLStrictSNIVHostCheck failed; OpenSSL is not built with support for TLS extensions and SNI indication. Refer to the documentation, and build a compatible version of OpenSSL.

Could you please enable the necessary build flags to support SNI?
>How-To-Repeat:

>Fix:


>Release-Note:
>Audit-Trail:
>Unformatted:



More information about the freebsd-ports-bugs mailing list