Uploaded image for project: 'JBoss Core Services'
  1. JBoss Core Services
  2. JBCS-2058

[Doc] Warning AH01882 from mod_ssl on RHEL 9.4 or earlier with JBCS Apache 2.4.62 zip

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • Documentation, RHEL9
    • None
    • False
    • Hide

      None

      Show
      None
    • False

      In JBCS Apache 2.4.62.GA zip, mod_ssl dependency requires OpenSSL 3.2.2 or later, and on RHEL 9.4 EUS the following warning message is logged when starting Apache.

      [Thu Oct 02 02:36:49.415167 2025] [ssl:warn] [pid 1523:tid 1523] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 3.2.2 4 Jun 2024 (OpenSSL 3.0.7 1 Nov 2022), version currently loaded is 0x30000070) - may result in undefined or erroneous behavior
      

      If it is intentional that JBCS Apache 2.4.62 and later require RHEL 9.5 or later, which includes OpenSSL 3.2.2, and drop support RHEL 9.4 or earlier, it would be helpful to add a note to the JBCS Apache 2.4.62 GA release notes or Core Services HTTP Server Supported Configurations.

      Steps to reproduce:

      // Set RHEL 9.4 EUS repository
      $ subscription-manager repos --disable="*"
      $ subscription-manager repos --enable=rhel-9-for-x86_64-baseos-eus-rpms --enable=rhel-9-for-x86_64-appstream-eus-rpms
      $ subscription-manager release --set=9.4
      $ sudo dnf install unzip mailcap yajl -y
      
      // update to the latest of RHEL 9.4 EUS
      $ sudo dnf update -y
      
      $ cat /etc/redhat-release 
      Red Hat Enterprise Linux release 9.4 (Plow)
      
      // RHEL 9.4 EUS has OpenSSL version 3.0.7
      $ rpm -qa | grep ^openssl
      openssl-fips-provider-3.0.7-2.el9.x86_64
      openssl-libs-3.0.7-29.el9_4.x86_64
      openssl-3.0.7-29.el9_4.x86_64
      
      $ sudo su - 
      # cd /opt
      # unzip jbcs-httpd24-httpd-2.4.62-RHEL9-x86_64.zip
      # sh .postinstall
      # sh .postinstall.selinux
      # sbin/apachectl start
      # cat logs/error_log | grep ssl
      [Thu Oct 02 02:51:22.735364 2025] [ssl:warn] [pid 1849:tid 1849] AH01882: Init: this version of mod_ssl was compiled against a newer library (OpenSSL 3.2.2 4 Jun 2024 (OpenSSL 3.0.7 1 Nov 2022), version currently loaded is 0x30000070) - may result in undefined or erroneous behavior
      

              cwatkins@redhat.com Christy Watkins
              rhn-support-nagetsum Norito Agetsuma
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated: