Project

General

Profile

[UE] Warning: please add "mod_openssl" to server.modules

Added by leo1 over 1 year ago

I have been using lighttpd version 1.4.53 for a while in an Intel(R) Atom(TM) CPU CE2752. I
I can't log into the remote GUI, restart the lighttpd service and get the following error when trying to run lighttpd.
2022-06-29 06:35:42: (../../lighttpd-1.4.53/src/configfile.c.59) Warning: please add "mod_openssl" to server.modules list in lig[ 1423.143495] lighttpd652: segfault at 45a007dc ip 45a007dc sp 7fde8e7c error 14httpd.conf. A f in libnss_dns-2.31.so[704c2000+1000]uture release of
lighttpd 1.4.x will not automatically load mod_openssl and lighttpd will not use SSL/TLS where your lighttpd.conf contains ssl.* directives
2022-06-29 06:35:42: (../../lighttpd-1.4.53/src/network.c.311) can't bind to socket: [::]:80 Address already in use
Segmentation fault (core dumped)
Here is the lighttpd output
lighttpd/1.4.53 (ssl) - a light and fast webserver


Replies (6)

RE: Warning: please add "mod_openssl" to server.modules - Added by leo1 over 1 year ago

Sorry, the latest version is temporarily unavailable due to some reasons. I think the reason for this problem is because the mod_openssl module is missing from version 1.4.53. I have tried adding in lighttpd.conf, but the problem is still not resolved

RE: Warning: please add "mod_openssl" to server.modules - Added by gstrauss over 1 year ago

Sorry, the latest version is temporarily unavailable due to some reasons.

This is the official site for lighttpd. lighttpd 1.4.65 is available.
If the latest lighttpd is not available to you on your device, that is a problem between you and your distro and/or your device manufacturer.

I think the reason for this problem is because the mod_openssl module is missing from version 1.4.53.

If you try to use ssl.* directives and your device does not have lighttpd TLS modules package installed, then that is not going to work. This is not a problem with the official release of lighttpd, but rather an issue with your understanding of packages for your device, your distro and/or your device manufacturer.

BTW, were there to be an issue in lighttpd, it would be fixed in a future version of lighttpd (e.g. lighttpd 1.4.66) and would not be fixed in lighttpd 1.4.53 on a device for which you do not know how to upgrade.

RE: [UE] Warning: please add "mod_openssl" to server.modules - Added by leo1 over 1 year ago

Thank you for your reply.Sorry, I mean that my device cannot be upgraded to the latest version for the time being, not that there is a problem with the latest version.But what I really want to ask is how to add mod_openssl module in lighttpd.conf, I try to modify conf as follows, but the test does not take effect after modification.


Looking forward to your reply, thank you very much!

RE: [UE] Warning: please add "mod_openssl" to server.modules - Added by leo1 over 1 year ago

Hi, I am getting a segfault while using version 1.4.53.When I restart lighttpd manually, the segfault is mandatory.The following is my crash information.
lighttpd3831: segfault at 495ad7dc ip 495ad7dc sp 7fc8743c error 14 in libpcre.so.1.2.7[4960f000+3b000].
I used gdb to locate the problem in OPENSSL_cleanup () from /usr/lib/libcrypto.so.1.1.
How can I solve this problem please? Is it caused by the wrong version of openssl?
Looking forward to your help, thank you.

RE: [UE] Warning: please add "mod_openssl" to server.modules - Added by leo1 over 1 year ago

openssl support was historically built into the core of lighttpd 1.4.x, but is now a standalone module (mod_openssl) since lighttpd 1.4.46.
The previous version of lighttpd on my device was 1.4.45, and since upgrading to 1.4.53 (although not the latest version), when I restart
lighttpd or stop lighttpd, there is a segfault of openssl_cleanup. I added mod_openssl in server module in lighttpd.conf.Below is my lighttpd.conf.
Any help is greatly appreciated.

RE: [UE] Warning: please add "mod_openssl" to server.modules - Added by gstrauss over 1 year ago

You seem competent with a debugger. I am sure you do not have an issue understanding that troubleshooting lighttpd 1.4.53 is a waste of time since lighttpd 1.4.53 was released Jan 2019, over 3 1/2 years ago, and the latest release of lighttpd is lighttpd 1.4.66.

See Docs_SSL for info on TLS syntax to avoid in your lighttpd.conf, e.g. do not nest $SERVER["socket"] configurations in other lighttpd.conf conditions.

If lighttpd 1.4.53 crashes for you when you restart lighttpd, then a potential workaround is to stop lighttpd and to start lighttpd, rather than to restart lighttpd.

    (1-6/6)