Apache httpd 2.4.53 with brotli support, TLS 1.3 final (RFC 8446) built against OpenSSL 1.1.1m with http2, mod_http2 2.0.2 and ALPN for Red Hat Enterprise Linux 7/8 and CentOS 7, Alma Linux 8, Rocky Linux 8

Apache httpd 2.4.53-1 with brotli compression library from Google, TLS 1.3 Final (RFC 8446), http2 (HTTP/2) support for Red Hat Enterprise Linux and CentOS 7/8, Alma Linux 8, Rocky Linux 8 added to repository. mod_http2 2.0.2 is built dynamically against OpenSSL 1.1.1m. Links:

Since 2.4.33 we added brotli compression library. Since 2.4.35 release we start building Apache httpd against OpenSSL 1.1.1*. Since 2.4.37 release TLS 1.3 final version (not to be confused with any draft versions) is supported and enabled by default. Since 2.4.43-4 release we built OpenSSL as a separate package that installs to the separate directory (/opt/codeit/openssl111) and does not affects system libraries. Please note that TLS 1.3 final version is supported in Chrome 70+ and Mozilla Firefox 63+. brotli support is already included in base RPM file. All you need is to add filters like

AddOutputFilterByType BROTLI_COMPRESS text/html text/plain text/xml text/css text/javascript application/javascript

8 thoughts on “Apache httpd 2.4.53 with brotli support, TLS 1.3 final (RFC 8446) built against OpenSSL 1.1.1m with http2, mod_http2 2.0.2 and ALPN for Red Hat Enterprise Linux 7/8 and CentOS 7, Alma Linux 8, Rocky Linux 8”

  1. Hi Alexander,

    I just updated my httpd (CentOS7) from the CodeIT repository today. But the headers show Apache 2.4.53 with OpenSSL-1.1.1l (instead of OpenSSL-1.1.1m), like this:

    Apache/2.4.53 (codeit) OpenSSL/1.1.1l mod_fcgid/2.3.9 mod_nss/1.0.14 NSS/3.28.4 PHP/7.4.28

    Could there be a mistake? Any chance that you will be releasing something with OpenSSL-1.1.1n (instead of m), soon?

    Thanks,
    Jonah

      1. Hi Alexander,

        Thank you very much for your solution. I have successfully followed your instructions and it has solved my problem.

        Thank you for taking care of these OpenSSL things for all of us,
        Jonah

  2. Oh dear! I’m so sorry! I was unaware you are located in Ukraine. Stay stafe.

  3. I am so relieved that you are safe, and not only for my own selfish reasons for using CodeIT repo. I am genuinely happy that you are alive and healthy because you are such good people who are performing a valuable service that is available to the public for free.

  4. Dear Alex stay safe.

    i do however have question.

    on my almalinux 8 machine i enable the codeit repo and then try to disabable the httpd module:

    i then get this error:
    AlmaLinux 8 – BaseOS 11 kB/s | 4.3 kB 00:00
    AlmaLinux 8 – AppStream 12 kB/s | 4.7 kB 00:00
    AlmaLinux 8 – Extras 9.9 kB/s | 3.9 kB 00:00
    Remi’s RPM repository for Enterprise Linux 8 – x86_64 51 kB/s | 3.0 kB 00:00
    Safe Remi’s RPM repository for Enterprise Linux 8 – x86_64 7.5 kB/s | 833 B 00:00
    Error: Problems in request:
    Modular dependency problems:

    Problem: module php:7.2:8030020210119114311:2c7ca891.x86_64 requires module(httpd:2.4), but none of the providers can be installed
    – conflicting requests

    After that i get no update from codeit.

    how can i fix this?

    regards and the outmost respect,

    Stefan

Leave a Reply

Your email address will not be published. Required fields are marked *