ports/151085: Build Apache 2.2 with SNI-enabled OpenSSL
Julian Mehnle
julian at mehnle.net
Wed Sep 29 19:20:02 UTC 2010
>Number: 151085
>Category: ports
>Synopsis: Build Apache 2.2 with SNI-enabled OpenSSL
>Confidential: no
>Severity: non-critical
>Priority: low
>Responsible: freebsd-ports-bugs
>State: open
>Quarter:
>Keywords:
>Date-Required:
>Class: change-request
>Submitter-Id: current-users
>Arrival-Date: Wed Sep 29 19:20:02 UTC 2010
>Closed-Date:
>Last-Modified:
>Originator: Julian Mehnle
>Release: 6.3-STABLE
>Organization:
>Environment:
FreeBSD <host> 6.3-STABLE FreeBSD 6.3-STABLE #1: Fri May 30 18:11:47 PDT 2008 root@<host>:<path>/symbols/builddir_amd64/usr/src/sys/MESSAGING_GATEWAY.amd64_INSTALL amd64
>Description:
I have apache-2.2.16_1 and openssl-1.0.0_2 installed, which should be capable of supporting TLS Name Server Indication (SNI).
http://wiki.apache.org/httpd/NameBasedSSLVHostsWithSNI
However, when I add the "SSLStrictSNIVHostCheck" directive to my httpd.conf and restart Apache, it says:
SSLStrictSNIVHostCheck failed; OpenSSL is not built with support for TLS extensions and SNI indication. Refer to the documentation, and build a compatible version of OpenSSL.
Could you please enable the necessary build flags to support SNI?
>How-To-Repeat:
>Fix:
>Release-Note:
>Audit-Trail:
>Unformatted:
More information about the freebsd-ports-bugs
mailing list