Alpine-based apache 2.4.37 does not start with mod_ssl

[csandanov]

The latest version does not start with enabled mod_ssl:

httpd: Syntax error on line 159 of /usr/local/apache2/conf/httpd.conf: 
Cannot load modules/mod_ssl.so into server: 
Error relocating /usr/local/apache2/modules/mod_ssl.so: SSL_CTX_set_post_handshake_auth: symbol not found

Perhaps requires the latest libressl version, I see a lot of compatibility fixes have been made in 2.8.1 https://github.com/libressl-portable/portable/blob/master/ChangeLog

[sergey-zabolotny]

the same error

[laurenra7]

This can be replicated by building a container from the latest httpd:alpine image and following the instructions for SSL/HTTPS on the Docker Hub page.

httpd: Syntax error on line 159 of /usr/local/apache2/conf/httpd.conf: Cannot load modules/mod_ssl.so into server: Error relocating /usr/local/apache2/modules/mod_ssl.so: SSL_CTX_set_post_handshake_auth: symbol not found

[yosifkit]

Perhaps the bump to alpine:3.8 in #114 will help. You can build the new Dockerfile or they should be on the Docker Hub once docker-library/official-images#4994 is merged and built.

[csandanov]

@yosifkit I tried running with 3.8 and edge, the same thing. The latest libressl in alpine repo is 2.7.4 atm.

[designbyjr]

I can also confirm that this also affects php:7.1.20-apache. Bump on upgrade, I've a VPS waiting here for SSL.

[tianon]

php:7.1.20-apache is completely unrelated to this image -- it installs Apache from Debian where this one builds it from source.

[badgersow]

We are also affected by this problem and will temporarily use 2.4.35-alpine version

[ptaunton]

Current usable image (2.4.35) is being flagged as having a vulnerability in libxml2 so this needs to be fixed as soon as possible.

[yosifkit]

[stretch] - libxml2 (Minor issue; wait for upstream fix for upstream bug 794914)

- https://security-tracker.debian.org/tracker/CVE-2017-18258

The CVE is irrelevant since even if we rebuilt the image the CVE would not be fixed anyway.

[AliceWonderMiscreations]

Could this be same issue referenced here?

http://openbsd-archive.7691.n7.nabble.com/Apache-2-4-37-SSL-CTX-set-post-handshake-auth-error-td354171.html#a354452