Apache with Mod ssl on a system running apache on freebsd

[modssl-2]

Trying to upgrade a freebsd 6.1 that is running "Apache/1.3.39 (Unix)
PHP/5.2.4 with Suhosin-Patch" to include mod_ssl.

It makes, with no problems but when I install it, it requiers Apache to be
deinstalled, the big problem is that Apache has a few required packages
that can not be removed with out a lot of problems.

This system is running a lot of web sites that can not have any down time,
(or very little down time)

Does any one have any ideas on how to fix it, easily if possible

With thanks

Haddow
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...

[Aaron Dalton]

modssl@... wrote:
> Trying to upgrade a freebsd 6.1 that is running "Apache/1.3.39 (Unix)
> PHP/5.2.4 with Suhosin-Patch" to include mod_ssl.
>
> It makes, with no problems but when I install it, it requiers Apache to be
> deinstalled, the big problem is that Apache has a few required packages
> that can not be removed with out a lot of problems.
>

You should be able to do a full "make" without deinstalling the old
Apache.  If make words, then it should only take a minute to do a "make
deinstall reinstall."  Of course, this doesn't account for time tweaking
the conf files and debugging.  This is why you really need a development
machine that is essentially a mirror of the critical app server so you
can do test runs and such.  Or a 2nd (or 3rd) app server for redundancy
if this server is so important.  In any case, you *will* at some point
have to down your web server to do the upgrade.  That is unavoidable.

--
Aaron Dalton       |   Super Duper Games
aaron@...   |   http://superdupergames.org
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...

[modssl-2]

On Thu, 24 Jan 2008, Aaron Dalton wrote:

> Date: Thu, 24 Jan 2008 07:30:47 -0700
> From: Aaron Dalton <aaron@...>
> Reply-To: modssl-users@...
> To: modssl-users@..., modssl@...
> Subject: Re: Apache with Mod ssl on a system running apache on freebsd
>
> modssl@... wrote:
> > Trying to upgrade a freebsd 6.1 that is running "Apache/1.3.39 (Unix)
> > PHP/5.2.4 with Suhosin-Patch" to include mod_ssl.
> >
> > It makes, with no problems but when I install it, it requiers Apache to be
> > deinstalled, the big problem is that Apache has a few required packages
> > that can not be removed with out a lot of problems.
> >
>
> You should be able to do a full "make" without deinstalling the old
> Apache.  If make words, then it should only take a minute to do a "make
> deinstall reinstall."  Of course, this doesn't account for time tweaking
> the conf files and debugging.  This is why you really need a development
> machine that is essentially a mirror of the critical app server so you
> can do test runs and such.  Or a 2nd (or 3rd) app server for redundancy
> if this server is so important.  In any case, you *will* at some point
> have to down your web server to do the upgrade.  That is unavoidable.
>

Aaron you did not read it..

The problem I have is it will not do a deinstall as there is other
packages that are using it, so a deinstall and reinstall does not work.

I have mod_ssl working on other machines, but they will be decommissioned
as soon as I get the other server up with mod_ssl.

we forgot to install mod_ssl before getting this system up, so now we are
trying to get it running.

Regards

haddow
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...

[Aaron Dalton]

modssl@... wrote:

>
> On Thu, 24 Jan 2008, Aaron Dalton wrote:
>
>> Date: Thu, 24 Jan 2008 07:30:47 -0700
>> From: Aaron Dalton <aaron@...>
>> Reply-To: modssl-users@...
>> To: modssl-users@..., modssl@...
>> Subject: Re: Apache with Mod ssl on a system running apache on freebsd
>>
>> modssl@... wrote:
>>> Trying to upgrade a freebsd 6.1 that is running "Apache/1.3.39 (Unix)
>>> PHP/5.2.4 with Suhosin-Patch" to include mod_ssl.
>>>
>>> It makes, with no problems but when I install it, it requiers Apache to be
>>> deinstalled, the big problem is that Apache has a few required packages
>>> that can not be removed with out a lot of problems.
>>>
>> You should be able to do a full "make" without deinstalling the old
>> Apache.  If make words, then it should only take a minute to do a "make
>> deinstall reinstall."  Of course, this doesn't account for time tweaking
>> the conf files and debugging.  This is why you really need a development
>> machine that is essentially a mirror of the critical app server so you
>> can do test runs and such.  Or a 2nd (or 3rd) app server for redundancy
>> if this server is so important.  In any case, you *will* at some point
>> have to down your web server to do the upgrade.  That is unavoidable.
>>
>
> Aaron you did not read it..
>
> The problem I have is it will not do a deinstall as there is other
> packages that are using it, so a deinstall and reinstall does not work.
>

Of course I read your post.  Why when there are misunderstandings do
people always assume it's the listener's fault and not their own?

Are you saying you are not *able* to remove the old Apache or not
*willing* to?  If you are not *willing* to, then I cannot help without
more information on why.  If you are saying you're not *able* to, I
think you're mistaken, or there is more information that you haven't
shared yet.

"make deinstall" will remove a port regardless of any dependencies.  I
assume you're talking about replacing the old apache with the exact same
version, just with mod_ssl compiled in.  In that case you still do what
I mentioned earlier:
   1) build the port w/ mod_ssl
   2) make deinstall reinstall
   3) pkgdb -Ff (to tell the port system that prior dependencies should
now point to the mod_ssl'd apache)

I'm happy to help if you want, I just need more information to be effective.

--
Aaron Dalton       |   Super Duper Games
aaron@...   |   http://superdupergames.org
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...

[modssl-2]

On Fri, 25 Jan 2008, Aaron Dalton wrote:

> modssl@... wrote:
> >
> > On Thu, 24 Jan 2008, Aaron Dalton wrote:
> >
> >> Date: Thu, 24 Jan 2008 07:30:47 -0700
> >> From: Aaron Dalton <aaron@...>
> >> Reply-To: modssl-users@...
> >> To: modssl-users@..., modssl@...
> >> Subject: Re: Apache with Mod ssl on a system running apache on freebsd
> >>
> >> modssl@... wrote:
> >>> Trying to upgrade a freebsd 6.1 that is running "Apache/1.3.39 (Unix)
> >>> PHP/5.2.4 with Suhosin-Patch" to include mod_ssl.
> >>>
> >>> It makes, with no problems but when I install it, it requiers Apache to be
> >>> deinstalled, the big problem is that Apache has a few required packages
> >>> that can not be removed with out a lot of problems.
> >>>
> >> You should be able to do a full "make" without deinstalling the old
> >> Apache.  If make words, then it should only take a minute to do a "make
> >> deinstall reinstall."  Of course, this doesn't account for time tweaking
> >> the conf files and debugging.  This is why you really need a development
> >> machine that is essentially a mirror of the critical app server so you
> >> can do test runs and such.  Or a 2nd (or 3rd) app server for redundancy
> >> if this server is so important.  In any case, you *will* at some point
> >> have to down your web server to do the upgrade.  That is unavoidable.
> >>
> >
> > Aaron you did not read it..
> >
> > The problem I have is it will not do a deinstall as there is other
> > packages that are using it, so a deinstall and reinstall does not work.
> >
>
> Of course I read your post.  Why when there are misunderstandings do
> people always assume it's the listener's fault and not their own?
>
> Are you saying you are not *able* to remove the old Apache or not
> *willing* to?  If you are not *willing* to, then I cannot help without
> more information on why.  If you are saying you're not *able* to, I
> think you're mistaken, or there is more information that you haven't
> shared yet.
>
> "make deinstall" will remove a port regardless of any dependencies.  I
> assume you're talking about replacing the old apache with the exact same
> version, just with mod_ssl compiled in.  In that case you still do what
> I mentioned earlier:
>    1) build the port w/ mod_ssl
>    2) make deinstall reinstall
>    3) pkgdb -Ff (to tell the port system that prior dependencies should
> now point to the mod_ssl'd apache)
>
> I'm happy to help if you want, I just need more information to be effective.
>

Aaron

I am not able to remove or deinstall because of the dependencies, that is
the problem

I have built apache with mod_ssl

but when we try a make deinstall reinstall, it says it can not deinstall
bacuse it has dependencies

so I am not sure what to do now


Regards

modssl
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...

[Aaron Dalton]

modssl@... wrote:

>
> Aaron
>
> I am not able to remove or deinstall because of the dependencies, that is
> the problem
>
> I have built apache with mod_ssl
>
> but when we try a make deinstall reinstall, it says it can not deinstall
> bacuse it has dependencies
>
> so I am not sure what to do now
>

Can you append the console output?  "make deinstall" should never fail
due to dependencies.  I do this procedure all the time; in fact, it's
the only way tools like portupgrade can work.  Otherwise you'd have to
uninstall huge chunks of your ports tree to upgrade any one of them.
"pkg_deinstall" on the other hand does block in that way.  Perhaps the
console record will shed some light.

--
Aaron Dalton       |   Super Duper Games
aaron@...   |   http://superdupergames.org
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      modssl-users@...
Automated List Manager                            majordomo@...