Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Context: I'm trying to set up an SVN server on a Mac OS X Server 10.6.7, and I'm running into the “SSL error parse tlsext” issue. I've tried changing the SSLProtocol option as described, but then I just get the "bad decompression" error.

The other solution seems to be to upgrade openssl to 0.9.8m or greater.

I can download and compile openssl just fine, but I don't know the best way to hook it into the default installation of Apache and mod_ssl. I'd like to stick with the built-in Apple software as much as possible, and preferably not overwrite their version of openssl either.

How do I update mod_ssl to use a new version of openssl on Mac OS X Server 10.6?

share|improve this question
    
You'll have to recompile mod_ssl with the newer OpenSSL you want to use. modssl.org/example –  Cocoabean May 24 '11 at 21:30

1 Answer 1

up vote 1 down vote accepted
+50

As CocoaBean has pointed out you will need to rebuild mod_ssl linking against the OpenSSL library you want to use rather than the one that comes with OS X. You would want to grab a copy of the Apache source code, as used in OS X (or the latest from httpd.apache.org) and then rebuild it in accordance with the Apache Foundation's installation instructions, paying special attention to how you specify which SSL library you want to link against.

Ideally you should only need to rebuild mod_ssl.so, but my suggestion would be to build and install a separate Apache instance to avoid any problems during OS X updates that could result in your modifications getting blown away.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.