Bug#537387: apache2-mpm-prefork: DSO module pubcookie no longer compatible

[Stefani Banerian <stefani@riseup.net>]

Package: apache2-mpm-prefork
Version: 2.2.11-6
Severity: normal

In pervious versions of apache2, mod_pubcookie.so (http://pubcookie.org/), 
(source at http://pubcookie.org/downloads/pubcookie-3.3.3.tar.gz )  would 
compile and load.  In v 2.2.11-6, pubcookie compiles, but load fails.

apache2ctl configtest output gives:

apache2: Syntax error on line 185 of /etc/apache2/apache2.conf: Syntax error on line 1 of /etc/apache2/mods-enabled/pubcookie.load: Cannot load /usr/lib/apache2/modules/mod_pubcookie.so into server: /usr/lib/apache2/modules/mod_pubcookie.so: undefined symbol: EVP_DigestInit


Mailing list archives, such as:
http://mailman2.u.washington.edu/pipermail/pubcookie-users/2006-September/001554.html

suggest looking at the output of ldd /usr/sbin/apache2

compare the result for lenny (2.2.9) vs  squeeze/sid (2.2.11)

lenny:/# ldd /usr/sbin/apache2
        linux-gate.so.1 =>  (0xffffe000)
        libpcre.so.3 => /usr/lib/libpcre.so.3 (0xb7fad000)
        libaprutil-1.so.0 => /usr/lib/libaprutil-1.so.0 (0xb7f8f000)
        libapr-1.so.0 => /usr/lib/libapr-1.so.0 (0xb7f63000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb7f4b000)
        libc.so.6 => /lib/libc.so.6 (0xb7e0d000)
        libldap_r-2.4.so.2 => /usr/lib/libldap_r-2.4.so.2 (0xb7dca000)
        liblber-2.4.so.2 => /usr/lib/liblber-2.4.so.2 (0xb7dbd000)
        libdb-4.6.so => /usr/lib/libdb-4.6.so (0xb7c8a000)
        libpq.so.5 => /usr/lib/libpq.so.5 (0xb7c6a000)
        libmysqlclient_r.so.15 => /usr/lib/libmysqlclient_r.so.15 (0xb7a7f000)
        libsqlite3.so.0 => /usr/lib/libsqlite3.so.0 (0xb7a10000)
        libexpat.so.1 => /usr/lib/libexpat.so.1 (0xb79ea000)
        libuuid.so.1 => /lib/libuuid.so.1 (0xb79e6000)
        librt.so.1 => /lib/librt.so.1 (0xb79dd000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0xb79aa000)
        libdl.so.2 => /lib/libdl.so.2 (0xb79a6000)
        /lib/ld-linux.so.2 (0xb7fdd000)
        libresolv.so.2 => /lib/libresolv.so.2 (0xb7993000)
        libsasl2.so.2 => /usr/lib/libsasl2.so.2 (0xb797c000)
        libgnutls.so.26 => /usr/lib/libgnutls.so.26 (0xb78df000)
        libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0xb7898000)
        libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0xb7745000)
        libkrb5.so.3 => /usr/lib/libkrb5.so.3 (0xb76b1000)
        libcom_err.so.2 => /lib/libcom_err.so.2 (0xb76ae000)
        libgssapi_krb5.so.2 => /usr/lib/libgssapi_krb5.so.2 (0xb7684000)
        libnsl.so.1 => /lib/libnsl.so.1 (0xb766c000)
        libm.so.6 => /lib/libm.so.6 (0xb7646000)
        libz.so.1 => /usr/lib/libz.so.1 (0xb7631000)
        libtasn1.so.3 => /usr/lib/libtasn1.so.3 (0xb7621000)
        libgpg-error.so.0 => /usr/lib/libgpg-error.so.0 (0xb761d000)
        libgcrypt.so.11 => /usr/lib/libgcrypt.so.11 (0xb75b4000)
        libk5crypto.so.3 => /usr/lib/libk5crypto.so.3 (0xb7590000)
        libkrb5support.so.0 => /usr/lib/libkrb5support.so.0 (0xb7588000)
        libkeyutils.so.1 => /lib/libkeyutils.so.1 (0xb7585000)


squeeze:~# ldd /usr/sbin/apache2
        linux-gate.so.1 =>  (0xffffe000)
        libpcre.so.3 => /usr/lib/libpcre.so.3 (0xb7f6d000)
        libaprutil-1.so.0 => /usr/lib/libaprutil-1.so.0 (0xb7f4d000)
        libapr-1.so.0 => /usr/lib/libapr-1.so.0 (0xb7f1f000)
        libpthread.so.0 => /lib/libpthread.so.0 (0xb7f07000)
        libc.so.6 => /lib/libc.so.6 (0xb7dc5000)
        libdb-4.7.so => /usr/lib/libdb-4.7.so (0xb7c6e000)
        libexpat.so.1 => /usr/lib/libexpat.so.1 (0xb7c48000)
        libuuid.so.1 => /lib/libuuid.so.1 (0xb7c44000)
        librt.so.1 => /lib/librt.so.1 (0xb7c3a000)
        libcrypt.so.1 => /lib/libcrypt.so.1 (0xb7c08000)
        libdl.so.2 => /lib/libdl.so.2 (0xb7c04000)
        /lib/ld-linux.so.2 (0xb7fa5000)


There is significant difference in the library dependencies listed, and in
particular, libssl, libcrypto, libkrb etc no longer appear.  It makes no 
difference if ssl DSO modules are loaded or not, pubcookie yields the
same error message.



-- Package-specific info:
Config file syntax check failed.
List of /etc/apache2/mods-enabled/*.load:
  alias auth_basic authn_file authz_default authz_groupfile
  authz_host authz_user autoindex cgi deflate dir env mime
  negotiation pubcookie setenvif status

-- System Information:
Debian Release: squeeze/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: i386 (i686)

Kernel: Linux 2.6.18-6-vserver-686 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/bash

Versions of packages apache2-mpm-prefork depends on:
ii  apache2.2-bin                 2.2.11-6   Apache HTTP Server common binary f
ii  apache2.2-common              2.2.11-6   Apache HTTP Server common files

apache2-mpm-prefork recommends no packages.

apache2-mpm-prefork suggests no packages.

-- no debconf information