Apache httpd 2.4.53-1 with brotli compression library from Google, TLS 1.3 Final (RFC 8446), http2 (HTTP/2) support for Red Hat Enterprise Linux and CentOS 7/8, Alma Linux 8, Rocky Linux 8 added to repository. mod_http2 2.0.2 is built dynamically against OpenSSL 1.1.1m. Links:
Since 2.4.33 we added brotli compression library. Since 2.4.35 release we start building Apache httpd against OpenSSL 1.1.1*. Since 2.4.37 release TLS 1.3 final version (not to be confused with any draft versions) is supported and enabled by default. Since 2.4.43-4 release we built OpenSSL as a separate package that installs to the separate directory (/opt/codeit/openssl111) and does not affects system libraries. Please note that TLS 1.3 final version is supported in Chrome 70+ and Mozilla Firefox 63+. brotli support is already included in base RPM file. All you need is to add filters like
8 thoughts on “Apache httpd 2.4.53 with brotli support, TLS 1.3 final (RFC 8446) built against OpenSSL 1.1.1m with http2, mod_http2 2.0.2 and ALPN for Red Hat Enterprise Linux 7/8 and CentOS 7, Alma Linux 8, Rocky Linux 8”
I just updated my httpd (CentOS7) from the CodeIT repository today. But the headers show Apache 2.4.53 with OpenSSL-1.1.1l (instead of OpenSSL-1.1.1m), like this:
Apache/2.4.53 (codeit) OpenSSL/1.1.1l mod_fcgid/2.3.9 mod_nss/1.0.14 NSS/3.28.4 PHP/7.4.28
Could there be a mistake? Any chance that you will be releasing something with OpenSSL-1.1.1n (instead of m), soon?
yum upgrade openssl111-libs
We already have openssl 1.1.1n from the very first day of its release.
Thank you very much for your solution. I have successfully followed your instructions and it has solved my problem.
Thank you for taking care of these OpenSSL things for all of us,
Oh dear! I’m so sorry! I was unaware you are located in Ukraine. Stay stafe.
We are now working from the relatively safe place, so builds are on-time for now.
Ukrainian Army performs well, so we can continue the builds now.
I am so relieved that you are safe, and not only for my own selfish reasons for using CodeIT repo. I am genuinely happy that you are alive and healthy because you are such good people who are performing a valuable service that is available to the public for free.
Dear Alex stay safe.
i do however have question.
on my almalinux 8 machine i enable the codeit repo and then try to disabable the httpd module:
i then get this error:
AlmaLinux 8 – BaseOS 11 kB/s | 4.3 kB 00:00
AlmaLinux 8 – AppStream 12 kB/s | 4.7 kB 00:00
AlmaLinux 8 – Extras 9.9 kB/s | 3.9 kB 00:00
Remi’s RPM repository for Enterprise Linux 8 – x86_64 51 kB/s | 3.0 kB 00:00
Safe Remi’s RPM repository for Enterprise Linux 8 – x86_64 7.5 kB/s | 833 B 00:00
Error: Problems in request:
Modular dependency problems:
Problem: module php:7.2:8030020210119114311:2c7ca891.x86_64 requires module(httpd:2.4), but none of the providers can be installed
– conflicting requests
After that i get no update from codeit.
how can i fix this?
regards and the outmost respect,
Please also try to disable php module to install php from remi:
dnf module disable php