logo
Apache Lounge
Webmasters

 


About

Forum Index Downloads Search Register Log in  RSS Apache Lounge
 


Keep Server Online

If you find the Apache Lounge, the downloads and overall help useful, please express your satisfaction with a donation.

or

Bitcoin

A donation makes a contribution towards the costs, the time and effort that's going in this site and building.

Thank You! Steffen

Apache Lounge is not sponsored.

Your donations will help to keep this site alive and well, and continuing building binaries.



Apache httpd 2.4.36-vote available

 
Post new topic   Reply to topic    Apache Forum Index -> News & Hangout



View previous topic :: View next topic  
Author Message
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2693
Location: Hilversum, NL, EU

PostPosted: Thu 11 Oct '18 14:59    Post subject: Apache httpd 2.4.36-vote available Reply with quote

Apache httpd 2.4.36 is around the corner, voting at ASF has started.. Expected that this is becoming the final.

ASF and Apachelounge changes :
https://www.apachelounge.com/Changelog-2.4.html

Notice that in this release OpenSSL with TLSv1.3 is supported,
to use TLSv1.3 see http://httpd.apache.org/docs/2.4/mod/mod_ssl.html#sslciphersuite

For example Apache Lounge has:

SSLProtocol -all +TLSv1.2 +TLSv1.3

You do not have to define SSLCipherSuite for 1.3, it is choosed auto.

You can check it at https://www.ssllabs.com/ssltest/analyze.html

Download: Removed, vote did not pass, see below.


To help, please give it a try.


Last edited by Steffen on Wed 17 Oct '18 11:07; edited 1 time in total
Back to top
DnvrSysEngr



Joined: 15 Apr 2012
Posts: 184
Location: Denver, CO USA

PostPosted: Thu 11 Oct '18 17:21    Post subject: Reply with quote

HTTPD 2.4.36 w/OpenSSL 1.1.1 successfully downloaded and configured with TLSv1.3 SSL ciphers.

So far, so good.
Back to top
glsmith
Moderator


Joined: 16 Oct 2007
Posts: 2170
Location: Sun Diego, USA

PostPosted: Sun 14 Oct '18 8:34    Post subject: Reply with quote

Server 2012 R2

I'm seeing sporadic reboots of my server with 2.4.36/1.1.1 as tagged. I had a pre tag 2.4.36-dev svn dump working for 19 days some odd hours until I upgraded it to the 2.4.36 tag. Then multiple reboots over +/- 48 hours. I've put the 2.4.36-dev version back on and time will tell if problem goes away again.

@Steffen, exactly the same problem I saw with the tlsv1.3_for_2.4 branch I mention in an email exchange with you awhile back.
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2693
Location: Hilversum, NL, EU

PostPosted: Sun 14 Oct '18 11:47    Post subject: Reply with quote

You tested also with above build from AL ?
Back to top
DnvrSysEngr



Joined: 15 Apr 2012
Posts: 184
Location: Denver, CO USA

PostPosted: Sun 14 Oct '18 17:39    Post subject: Reply with quote

Running my installation of HTTPD 2.4.36 with a rather basic setup on Windows Server 2008 R2 with no hiccups.
Back to top
Steffen
Moderator


Joined: 15 Oct 2005
Posts: 2693
Location: Hilversum, NL, EU

PostPosted: Mon 15 Oct '18 16:37    Post subject: Reply with quote

Vote did not pass, quote ASF:

As a result of testing and further analysis of this release, I am calling this release dead on the vine and shall not pursue publishing it. We have -1 votes based on the recently discovered OpenSSL 1.1.1 behavior change.

Although this tag shall not become a release, I'd like to thank all testers and those who have put effort into getting us to this point as well as catching an error that could impact our users. I consider this a victory Smile

I will follow up with another proposal to T&R when we resolve the issue.
Back to top


Post new topic   Reply to topic    Apache Forum Index -> News & Hangout
Page 1 of 1