trafficserver-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Reindl Harald <>
Subject Re: Deprecation of SSL v2/3
Date Sat, 16 Apr 2016 22:44:28 GMT

Am 17.04.2016 um 00:38 schrieb Leif Hedstrom:
>> so what gives you ab -c 5 -n 100 your client?
> It fails too from that CentOS7 box to your box.
>> [harry@srv-rhsoft:~]$ ab -c 5 -n 100
>> This is ApacheBench, Version 2.3 <$Revision: 1706008 $>
>> Copyright 1996 Adam Twiss, Zeus Technology Ltd,
>> Licensed to The Apache Software Foundation,
>> <>(be patient)...^C
>> Server Software:        ATS/6.2.0
>> Server Hostname:
>> <>
>> Server Port:            443
>> SSL/TLS Protocol:       TLSv1.2,ECDHE-RSA-AES128-GCM-SHA256,2048,128
> So it seems your ab works against this CentOS7 box running ATS v6.2.0 ?


> What version of OpenSSL did you build ATS with? I am running
> docs.trafficserver.a.o with OpenSSL v1.0.2g if I recall (latest stable
> release)

seems not matter that much since i have this issue for years now and the 
httpd servers are built in the same environments with the same libraries 
and don't have that issue

there where a lot of ATS and openssl versions over the time - looking at 
the output of ssllabs the ATS box donÄt support some SSL3 *compatibke* 
handshake for whatever reasons

[root@buildserver:~]$ rpm -qa | grep openssl

[root@buildserver:~]$ rpm -q trafficserver

[root@buildserver:~]$ cat /rpmbuild/SPECS/trafficserver.spec
%global            debug_package    %{nil}

Summary:           Apache Trafficserver
Name:              trafficserver
Version:           6.1.1
Release:           2%{?dist}
Epoch:             2
License:           ASL 2.0
Group:             System Environment/Daemons
Source1:           %{name}.service
Source2:           %{name}.tmpfilesd
BuildRequires:     autoconf
BuildRequires:     automake
BuildRequires:     expat-devel
BuildRequires:     gcc-c++
BuildRequires:     hwloc-devel
BuildRequires:     libaio-devel
BuildRequires:     libtool
BuildRequires:     openssl-devel
BuildRequires:     pcre-devel
BuildRequires:     tcl-devel
BuildRequires:     xz-devel
BuildRequires:     zlib-devel
BuildRequires:     ncurses-devel
BuildRequires:     libcurl-devel
Requires:          systemd

Apache Traffic Server is a fast, scalable and extensible HTTP/1.1 
compliant caching proxy server 


%package           devel 

Summary:           Apache Traffic Server development libraries and 
header files 

Group:             Development/Libraries 

Requires:          %{name} = %{version}-%{release} 

%description       devel 


%package           manpages 

Summary:           Trafficserver manuals 

Group:             Applications/System 

%description       manpages 

%package           plugins
Summary:           Trafficserver plugins
Group:             Applications/System
%description       plugins

%setup -q

export CFLAGS="%{optflags} -O3 -fPIC -Wno-deprecated-declarations 
-Wno-error=unused-result -funroll-loops -funswitch-loops 
-minline-all-stringops -flto -ffat-lto-objects -fuse-ld=gold 
export LDFLAGS="-Wl,-z,now -Wl,-z,relro,-z,noexecstack,-fuse-ld=gold 
-pie %{optflags} -O3 -funroll-loops -funswitch-loops 
-minline-all-stringops -flto -ffat-lto-objects -fuse-ld=gold 
export SH_LDFLAGS="-Wl,-z,now -Wl,-z,relro,-z,noexecstack,-fuse-ld=gold 
%{optflags} -O3 -funroll-loops -funswitch-loops -minline-all-stringops 
-flto -ffat-lto-objects -fuse-ld=gold -fuse-linker-plugin"
./configure --enable-layout=Gentoo \
  --libdir=%{_libdir}/%{name} \
  --with-group=ats \
  --with-user=ats \
  --disable-debug \
  --disable-diags \
  --disable-spdy \
  --disable-static \
  --disable-tests \
  --enable-hwloc \
  --enable-shared  \
  --with-jemalloc \
  --with-pic \
  --with-tcl=%{_libdir} \
%{__make} %{?_smp_mflags}

make install-strip DESTDIR=%{buildroot}
mkdir -p %{buildroot}/run/%{name}
install -D -m 0644 -p %{SOURCE1} %{buildroot}%{_unitdir}/%{name}.service
install -D -m 0644 -p %{SOURCE2} %{buildroot}%{_tmpfilesdir}/%{name}.conf
rm -rf %{buildroot}%{_docdir}/%{name} \
  %{buildroot}%{_libdir}/perl5/ \
  %{buildroot}%{_libdir}/%{name}/*.a \
  %{buildroot}%{_libdir}/%{name}/*.la \
  %{buildroot}%{_libdir}/%{name}/plugins/*.la \
  %{buildroot}%{_datarootdir}/perl5/Apache/ \
  %{buildroot}%{_datarootdir}/perl5/Apache/ \
  %{buildroot}%{_datarootdir}/perl5/Apache/TS/ \
  %{buildroot}%{_datarootdir}/perl5/Apache/TS/ \
  %{buildroot}%{_datarootdir}/perl5/Apache/TS/Config/ \
  %{buildroot}%{_bindir}/tspush \
  %{buildroot}%{_bindir}/traffic_shell \
  %{buildroot}%{_bindir}/traffic_sac \
  %{buildroot}%{_bindir}/trafficserver \
  %{buildroot}%{_bindir}/tstop \
strip -s %{buildroot}%{_bindir}/traffic_cop \
  %{buildroot}%{_bindir}/traffic_line \
  %{buildroot}%{_bindir}/traffic_logcat \
  %{buildroot}%{_bindir}/traffic_logstats \
  %{buildroot}%{_bindir}/traffic_server \
  %{buildroot}%{_libdir}/%{name}/*.so* \
mkdir -p %{buildroot}%{_sysconfdir}/ \
  %{buildroot}%{_sysconfdir}/%{name}/internal \
  %{buildroot}%{_sysconfdir}/%{name}/snapshots \
  %{buildroot}%{_sysconfdir}/%{name}/ssl \
chmod 0770 %{buildroot}%{_sysconfdir}/%{name}/internal
chmod 0770 %{buildroot}%{_sysconfdir}/%{name}/snapshots
chmod 0750 %{buildroot}%{_sysconfdir}/%{name}/ssl
chmod 0750 %{buildroot}%{_sysconfdir}/%{name}/body_factory
echo "%{_libdir}/%{name}" > 
mv %{buildroot}%{_sysconfdir}/%{name}/body_factory/default/* 
mv %{buildroot}%{_sysconfdir}/%{name}/*.config 

%{_bindir}/systemctl --system daemon-reload &> /dev/null
chown root:ats %{_sysconfdir}/%{name}/body_factory &> /dev/null
chown root:ats %{_sysconfdir}/%{name}/ssl &> /dev/null
chown ats:ats %{_sysconfdir}/%{name}/internal &> /dev/null
chown ats:ats %{_sysconfdir}/%{name}/snapshots &> /dev/null
exit 0

getent group ats &> /dev/null || groupadd -r ats -g 176 &> /dev/null
getent passwd ats &> /dev/null || useradd -r -u 176 -g ats -d / -s 
%{_sbindir}/nologin -c "Apache Traffic Server" ats &> /dev/null
exit 0

%dir %{_libdir}/%{name}
%dir %{_sysconfdir}/%{name}
%config(noreplace) %{_sysconfdir}/%{name}/*
%attr(0770, ats, ats) %dir %{_var}/log/%{name}
%attr(0770, ats, ats) %dir /run/%{name}
%attr(0770, ats, ats) %dir %{_var}/cache/%{name}
%attr(0644, root, root) %{_sysconfdir}/*

%files devel
%dir %{_includedir}/trafficserver

%files manpages

%files plugins
%dir %{_libdir}/%{name}/plugins

* Sun Mar 20 2016 Reindl Harald <>
- update to 6.1.1

View raw message