logo
Apache Lounge
Webmasters

 

About Forum Index Downloads Search Register Log in RSS X


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Your donations will help to keep this site alive and well, and continuing building binaries. Apache Lounge is not sponsored.
Post new topic   Forum Index -> News & Hangout View previous topic :: View next topic
Reply to topic   Topic: Apache httpd 2.4.36-vote available
Author
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3095
Location: Hilversum, NL, EU
PostPosted: Thu 11 Oct '18 14:59    Post subject: Apache httpd 2.4.36-vote available Reply with quote
Apache httpd 2.4.36 is around the corner, voting at ASF has started.. Expected that this is becoming the final.

ASF and Apachelounge changes :
https://www.apachelounge.com/Changelog-2.4.html

Notice that in this release OpenSSL with TLSv1.3 is supported,
to use TLSv1.3 see http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslciphersuite

For example Apache Lounge has:

SSLProtocol -all +TLSv1.2 +TLSv1.3

You do not have to define SSLCipherSuite for 1.3, it is choosed auto.

You can check it at https://www.ssllabs.com/ssltest/analyze.html

Download: Removed, vote did not pass, see below.


To help, please give it a try.

Last edited by Steffen on Wed 17 Oct '18 11:07; edited 1 time in total
Back to top
DnvrSysEngr



Joined: 15 Apr 2012
Posts: 226
Location: Denver, CO USA
PostPosted: Thu 11 Oct '18 17:21    Post subject: Reply with quote
HTTPD 2.4.36 w/OpenSSL 1.1.1 successfully downloaded and configured with TLSv1.3 SSL ciphers.

So far, so good.
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2268
Location: Sun Diego, USA
PostPosted: Sun 14 Oct '18 8:34    Post subject: Reply with quote
Server 2012 R2

I'm seeing sporadic reboots of my server with 2.4.36/1.1.1 as tagged. I had a pre tag 2.4.36-dev svn dump working for 19 days some odd hours until I upgraded it to the 2.4.36 tag. Then multiple reboots over +/- 48 hours. I've put the 2.4.36-dev version back on and time will tell if problem goes away again.

@Steffen, exactly the same problem I saw with the tlsv1.3_for_2.4 branch I mention in an email exchange with you awhile back.
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3095
Location: Hilversum, NL, EU
PostPosted: Sun 14 Oct '18 11:47    Post subject: Reply with quote
You tested also with above build from AL ?
Back to top
DnvrSysEngr



Joined: 15 Apr 2012
Posts: 226
Location: Denver, CO USA
PostPosted: Sun 14 Oct '18 17:39    Post subject: Reply with quote
Running my installation of HTTPD 2.4.36 with a rather basic setup on Windows Server 2008 R2 with no hiccups.
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 3095
Location: Hilversum, NL, EU
PostPosted: Mon 15 Oct '18 16:37    Post subject: Reply with quote
Vote did not pass, quote ASF:

As a result of testing and further analysis of this release, I am calling this release dead on the vine and shall not pursue publishing it. We have -1 votes based on the recently discovered OpenSSL 1.1.1 behavior change.

Although this tag shall not become a release, I'd like to thank all testers and those who have put effort into getting us to this point as well as catching an error that could impact our users. I consider this a victory Smile

I will follow up with another proposal to T&R when we resolve the issue.
Back to top


Reply to topic   Topic: Apache httpd 2.4.36-vote available View previous topic :: View next topic
Post new topic   Forum Index -> News & Hangout