Hi,
I compiled apache http server with modSecurity 2.9.4 on RHEL-7 and RHEL-8. I was able to start RHEL-7 but not RHEL-8
I am getting below error while startup on RHEL-8 server. After research I deleted libcrypto.so.1.1 and libcrypto.so from under apache/lib folder and It started. Now I am not sure if deleting libcrypto.so.1.1 will cause any issue. Does anyone know if that is change for RHEL-8 server with modSecurity?
Error Details and modsecurity2.so differences on both RHEL-7 and 8 servers
httpd: Syntax error on line 94 of /home/Dev/conf/httpd.conf: Syntax error on line 1 of /home/Dev/conf/httpd-modsecurity.conf:
Cannot load modules/mod_security2.so into server: /lib64/libk5crypto.so.3: undefined symbol: EVP_KDF_ctrl, version OPENSSL_1_1_1b
For RHEL-7
OUTPUT for -- ldd mod_security2.so
.
.
libssl.so.1.1 => not found
libcrypto.so.1.1 => not found
libz.so.1 => /lib64/libz.so.1 (0x00007f528d332000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f528d10c000)
liblua-5.1.so => /lib64/liblua-5.1.so (0x00007f528cede000)
libm.so.6 => /lib64/libm.so.6 (0x00007f528cbdc000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f528c9d8000)
libc.so.6 => /lib64/libc.so.6 (0x00007f528c3ec000)
libssl.so.10 => /lib64/libssl.so.10 (0x00007f528c17a000)
libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f528bd17000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f528baca000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f528b7e1000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f528b5ae000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f528b3aa000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f528b19a000)
/lib64/ld-linux-x86-64.so.2 (0x00007f528f580000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f528af97000)
libssl.so.1.1 => not found
libcrypto.so.1.1 => not found
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f528ad93000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f528ab6c000)
nm -D /lib64/libk5crypto.so.3 | grep EVP_KDF_ctrl
--no output-
For RHEL-8
OUTPUT for -- nm -D /lib64/libk5crypto.so.3 | grep -i EVP_KDF_ctrl
U EVP_KDF_ctrl
OUTPUT for -- ldd mod_security2.so
.
..
libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007fe6452bf000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007fe644dd6000)
libzstd.so.1 => /lib64/libzstd.so.1 (0x00007fe644b32000)
libxml2.so.2 => /lib64/libxml2.so.2 (0x00007fe6447ca000)
libz.so.1 => /lib64/libz.so.1 (0x00007fe6445b3000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe64438c000)
liblua-5.3.so => /lib64/liblua-5.3.so (0x00007fe644151000)
libm.so.6 => /lib64/libm.so.6 (0x00007fe643dcf000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007fe643bcb000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe64395a000)
libc.so.6 => /lib64/libc.so.6 (0x00007fe643595000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fe643340000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fe643056000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fe642e3f000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fe642c3b000)
/lib64/ld-linux-x86-64.so.2 (0x00007fe646de5000)
libnghttp2.so.14 => /lib64/libnghttp2.so.14 (0x00007fe642a14000)
libidn2.so.0 => /lib64/libidn2.so.0 (0x00007fe6427f6000)
libssh.so.4 => /lib64/libssh.so.4 (0x00007fe642587000)
libpsl.so.5 => /lib64/libpsl.so.5 (0x00007fe642376000)
libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x00007fe642169000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fe641f58000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fe641d54000)
libunistring.so.2 => /lib64/libunistring.so.2 (0x00007fe6419d3000)
libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x00007fe6417b2000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fe641588000)
libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007fe641304000)
Regards,
Dev
I compiled apache http server with modSecurity 2.9.4 on RHEL-7 and RHEL-8. I was able to start RHEL-7 but not RHEL-8
I am getting below error while startup on RHEL-8 server. After research I deleted libcrypto.so.1.1 and libcrypto.so from under apache/lib folder and It started. Now I am not sure if deleting libcrypto.so.1.1 will cause any issue. Does anyone know if that is change for RHEL-8 server with modSecurity?
Error Details and modsecurity2.so differences on both RHEL-7 and 8 servers
httpd: Syntax error on line 94 of /home/Dev/conf/httpd.conf: Syntax error on line 1 of /home/Dev/conf/httpd-modsecurity.conf:
Cannot load modules/mod_security2.so into server: /lib64/libk5crypto.so.3: undefined symbol: EVP_KDF_ctrl, version OPENSSL_1_1_1b
For RHEL-7
OUTPUT for -- ldd mod_security2.so
.
.
libssl.so.1.1 => not found
libcrypto.so.1.1 => not found
libz.so.1 => /lib64/libz.so.1 (0x00007f528d332000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007f528d10c000)
liblua-5.1.so => /lib64/liblua-5.1.so (0x00007f528cede000)
libm.so.6 => /lib64/libm.so.6 (0x00007f528cbdc000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007f528c9d8000)
libc.so.6 => /lib64/libc.so.6 (0x00007f528c3ec000)
libssl.so.10 => /lib64/libssl.so.10 (0x00007f528c17a000)
libcrypto.so.10 => /lib64/libcrypto.so.10 (0x00007f528bd17000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007f528baca000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007f528b7e1000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007f528b5ae000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007f528b3aa000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007f528b19a000)
/lib64/ld-linux-x86-64.so.2 (0x00007f528f580000)
libfreebl3.so => /lib64/libfreebl3.so (0x00007f528af97000)
libssl.so.1.1 => not found
libcrypto.so.1.1 => not found
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007f528ad93000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007f528ab6c000)
nm -D /lib64/libk5crypto.so.3 | grep EVP_KDF_ctrl
--no output-
For RHEL-8
OUTPUT for -- nm -D /lib64/libk5crypto.so.3 | grep -i EVP_KDF_ctrl
U EVP_KDF_ctrl
OUTPUT for -- ldd mod_security2.so
.
..
libssl.so.1.1 => /lib64/libssl.so.1.1 (0x00007fe6452bf000)
libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007fe644dd6000)
libzstd.so.1 => /lib64/libzstd.so.1 (0x00007fe644b32000)
libxml2.so.2 => /lib64/libxml2.so.2 (0x00007fe6447ca000)
libz.so.1 => /lib64/libz.so.1 (0x00007fe6445b3000)
liblzma.so.5 => /lib64/liblzma.so.5 (0x00007fe64438c000)
liblua-5.3.so => /lib64/liblua-5.3.so (0x00007fe644151000)
libm.so.6 => /lib64/libm.so.6 (0x00007fe643dcf000)
libdl.so.2 => /lib64/libdl.so.2 (0x00007fe643bcb000)
libpcre.so.1 => /lib64/libpcre.so.1 (0x00007fe64395a000)
libc.so.6 => /lib64/libc.so.6 (0x00007fe643595000)
libgssapi_krb5.so.2 => /lib64/libgssapi_krb5.so.2 (0x00007fe643340000)
libkrb5.so.3 => /lib64/libkrb5.so.3 (0x00007fe643056000)
libk5crypto.so.3 => /lib64/libk5crypto.so.3 (0x00007fe642e3f000)
libcom_err.so.2 => /lib64/libcom_err.so.2 (0x00007fe642c3b000)
/lib64/ld-linux-x86-64.so.2 (0x00007fe646de5000)
libnghttp2.so.14 => /lib64/libnghttp2.so.14 (0x00007fe642a14000)
libidn2.so.0 => /lib64/libidn2.so.0 (0x00007fe6427f6000)
libssh.so.4 => /lib64/libssh.so.4 (0x00007fe642587000)
libpsl.so.5 => /lib64/libpsl.so.5 (0x00007fe642376000)
libbrotlidec.so.1 => /lib64/libbrotlidec.so.1 (0x00007fe642169000)
libkrb5support.so.0 => /lib64/libkrb5support.so.0 (0x00007fe641f58000)
libkeyutils.so.1 => /lib64/libkeyutils.so.1 (0x00007fe641d54000)
libunistring.so.2 => /lib64/libunistring.so.2 (0x00007fe6419d3000)
libbrotlicommon.so.1 => /lib64/libbrotlicommon.so.1 (0x00007fe6417b2000)
libselinux.so.1 => /lib64/libselinux.so.1 (0x00007fe641588000)
libpcre2-8.so.0 => /lib64/libpcre2-8.so.0 (0x00007fe641304000)
Regards,
Dev