Topic: Apache httpd 2.4.57 GA Available :: Update

[Steffen]

Apache httpd 2.4.57 is released as GA.

02 August 2023 Update, OpenSSL update, see below

ASF and Apachelounge changes : https://www.apachelounge.com/Changelog-2.4.html

Important fix for crash in mod_http2 with mod_fcgid, which is present in 2.4.55 and 2.4.56, see https://www.apachelounge.com/viewtopic.php?p=41795#41795

Documentation: http://httpd.apache.org/docs/2.4/

Build with dependencies:

- openssl 3.1.2
- nghttp2 1.52.0
- jansson 2.14
- curl 8.0.1
- apr 1.7.3
- apr-util 1.6.3
- apr-iconv 1.2.2
- zlib 1.2.13
- brotli 1.0.9
- pcre2 10.42
- libxml2 2.10.3
- lua VS17 5.4.4
- expat 2.5.0

Notes VS17 OpenSSL 3.x.x:

- Only PHP 8.2 and 8.1 (build with 3.x.x) is running as module.
Running with mod_fcgid no issues seen.

For running as module, See also the post from user Otomatic and notes at https://www.apachelounge.com/viewtopic.php?t=8969
and https://www.apachelounge.com/viewtopic.php?t=8938

- With too weak certificates/ciphers Apache does not start, see https://www.apachelounge.com/viewtopic.php?t=8819


When you have hangs, slow traffic and/or when having in your log entries like Asynchronous AcceptEx failed. You can try the following settings:

AcceptFilter http none
AcceptFilter https none
EnableSendfile off
EnableMMAP off

Enjoy,

Steffen

[Steffen]

Update to APR 1.7.4.

Unfortunately, one of the fixes in APR 1.7.3 has caused a significant regression, where writing to files opened with both APR_FOPEN_APPEND and APR_FOPEN_BUFFERED now may not properly append the data on Windows. The issue has been reported in https://lists.apache.org/thread/56gnyc3tc0orjh5mfsqo9gpq1br59b01


https://www.apachelounge.com/Changelog-2.4.html

[FreeBeing11]

Hi,

If I understand, there is a problem with httpd 2.4.57 and any other PHP version than 8.2.x when this is used as Apache module ?

I'm suprised, because I used your httpd 2.4.57 build with PHP 8.1.18 as module.

Please, do you have more informations ?

Thank you

[Steffen]

The info is based on the notes from the PHP team, see https://www.apachelounge.com/viewtopic.php?t=8938

Now it looks they upgraded 8.1 with 3.0.

We shall add 8.1 to the note above.

Thanks for sharing !

[Jan-E]

I was not aware of any change like that for PHP 8.1. And it is not true. The official builds of PHP 8.1.18 and PHP 8.1.19 RC1 still come with OpenSSL 1.1.1:
https://windows.php.net/download/

[admin]

See https://externals.io/message/119305

[Jan-E]

I just asked Christoph in the mailinglists what the current status is.

[Steffen]

Updated to OpenSSL 3.1.0

[Otomatic]

Hi,

In the VS17 zip file of May 15, 2023, there is no apache/bin/iconv/ folder

Is this normal

[Steffen]

Removed it. Never seen that it was used.

[James Blond]

There are some places[1] where it is used like xlate. These two apr util function uses that

apr_md4_ctx_t::xlate()
apr_md5_ctx_t::xlate()

But like Steffen I think that is not relevant to run apache.

[1] https://gist.github.com/JBlond/18edceb56e69769a248ab5a125307049

[Steffen]

Updated to OpenSSL 3.1.1

[ltdeta]

Is it possible to get the VS17 binarys still with OpenSSL 1.1.1u.

We are still using 8.0 the migration to 8.2 is already running but is time consuming.

[admin]

No plans to build with 1.1.1

[Steffen]

Updated to OpenSSL 3.1.2