FREAK 취약점의 경우,
다음 줄을 사용하여 Apache 2.4.12를 2.4.10 및 OpenSSL에서 1.0.2c로 업그레이드하려고했습니다.
./config --openssldir=/usr/local/openssl
make
make test
make install
OpenSSL 업그레이드가 성공한 후. 다음 줄을 사용하여 apache2.4.12를 수동으로 업그레이드해 보았습니다.
./configure --prefix=$apache_install_path --with-included-apr=$PACKAGE_PATH/$APACHE_INSTALLATION_PKGNAME/httpd-2.4.12/srclib/apr --with-pcre=$PACKAGE_PATH/$APACHE_INSTALLATION_PKGNAME/pcre-8.36/pcre-config --with-included-apr-util=$PACKAGE_PATH/$APACHE_INSTALLATION_PKGNAME/httpd-2.4.12/srclib/apr-util --enable-mods-shared=all --enable-ssl=shared --enable-ssl --enable-rewrite=shared --enable-proxy=shared --enable-headers=shared --enable-expires=shared --enable-cern-meta=shared --enable-unique-id=shared --enable-mime-magic=shared --with-ssl=/usr/local/ssl --enable-so --enable-module=so --enable-module=rewrite --enable-shared=rewrite --enable-load-all-modules $@ >> "${HTTPD_LOG}" 2>&1
APR, APR-Util, Pcre가 컴파일되어 설치되었다고 가정합니다.
httpd 컴파일 로그에 다음 오류가 표시됩니다.
Making install in ssl
make[2]: Entering directory `/data/AMOS/PACKAGES/Apache/Apache2.4.12_installation_packages/httpd-2.4.12/modules/ssl'
make[3]: Entering directory `/data/AMOS/PACKAGES/Apache/Apache2.4.12_installation_packages/httpd-2.4.12/modules/ssl'
/usr/local/apr/build-1/libtool --silent --mode=link gcc -std=gnu99 -I/usr/local/ssl/include -g -O2 -pthread -L/usr/local/ssl/lib -lssl -lcrypto -lrt -lcrypt -lpthread -o mod_ssl.la -rpath /usr/local/apache2/modules -module -avoid-version mod_ssl.lo ssl_engine_config.lo ssl_engine_init.lo ssl_engine_io.lo ssl_engine_kernel.lo ssl_engine_log.lo ssl_engine_mutex.lo ssl_engine_pphrase.lo ssl_engine_rand.lo ssl_engine_vars.lo ssl_scache.lo ssl_util_stapling.lo ssl_util.lo ssl_util_ssl.lo ssl_engine_ocsp.lo ssl_util_ocsp.lo -export-symbols-regex ssl_module
/usr/bin/ld: /usr/local/ssl/lib/libssl.a(s3_srvr.o): relocation R_X86_64_32 against `.rodata' can not be used when making a shared object; recompile with -fPIC
/usr/local/ssl/lib/libssl.a: could not read symbols: Bad value
collect2: ld returned 1 exit status
make[3]: *** [mod_ssl.la] Error 1
make[3]: Leaving directory `/data/AMOS/PACKAGES/Apache/Apache2.4.12_installation_packages/httpd-2.4.12/modules/ssl'
make[2]: *** [install-recursive] Error 1
make[2]: Leaving directory `/data/AMOS/PACKAGES/Apache/Apache2.4.12_installation_packages/httpd-2.4.12/modules/ssl'
make[1]: *** [install-recursive] Error 1
make[1]: Leaving directory `/data/AMOS/PACKAGES/Apache/Apache2.4.12_installation_packages/httpd-2.4.12/modules'
make: *** [install-recursive] Error 1