Date: Fri, 29 Mar 2024 02:21:23 +0000 (UTC) Message-ID: <409559745.3.1711678883488@357366c44ab7> Subject: Exported From Confluence MIME-Version: 1.0 Content-Type: multipart/related; boundary="----=_Part_2_1420777678.1711678883487" ------=_Part_2_1420777678.1711678883487 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Content-Location: file:///C:/exported.html
With the latest Red Hat 5 updates, OpenSSL (now based on version 0.9.8e)=
is built with an environment variable hook that disables compression witho=
ut a rebuild. The variable is called OPENSSL_NO_DEFAULT_ZLIB and should be =
set to "1" to disable compression. It can be exported from /etc/sysco=
nfig/httpd
to control Apache's SSL handling and work around this bug=
.
For other Red Hat variants or if a rebuild is needed for some other reas= on, see below.
The procedure is probably similar across Red Hat and CentOS variants, bu= t I've only tried with CentOS 5.
You should do this as something other than root, but explaining how to c= reate a local RPM build tree is not in scope. You can figure that out on yo= ur own if you want to. Assuming you're root, the following steps should reb= uild a set of OpenSSL packages without zlib support, but with the same name= as the original OS-supplied packages.
These instructions match the version at the time of authoring. If the Op= enSSL package gets upgraded, the latest revision number might be higher.
$ cd /u= sr/src/redhat/SRPMS $ wget http://mirror.centos.org/centos/5/os/SRPMS/openssl-0.9.8b-10.el5.src= .rpm $ rpm -i openssl-0.9.8b-10.el5.src.rpm
/usr/src/redhat/SPECS/openssl.spec
to remove the zl=
ib dependencies and build option. Search for every instance of "zlib" and "=
zlib-devel" and remove them all, particularly the one used to configure the=
package.$ cd ..= /SPECS $ rpmbuild -ba --define=3D'dist .el5' openssl.spec
$ cd ..= /RPMS/i386 $ rpm -ivh --force openssl-0.9.8b-10.el5.rpm openssl-devel-0.9.8b-10.el5.rp= m