Re: Support for ECH in Apache httpd

Stephen Farrell <[email protected]> Wed, 11 Mar 2026 13:11:17 +0000

Newsgroups	gmane.comp.apache.devel
Message-ID	<[email protected]>

Hiya,

On 11/03/2026 08:15, Bernard Spil wrote:
> Hi all,
> 
> The OpenSSL project released an Alpha version of OpenSSL 4.0 with ECH 
> support.
> 
> Is Apache httpd project planning on supporting ECH?
> (I am aware of the DEfO fork with ECH support but would love to see this 
> in Apache httpd).

We upstreamed ECH support based the DEfO code late
last year. [1] That was pretty painless from my POV
with good support from httpd maintainers.

That requires you build httpd with an OpenSSL version
that has ECH support.

I'm not sure how that'll eventually turn into some
release, though, but hopefully it'll just happen in
the normal course of events once OpenSSL 4.0 is used
in releases.

Cheers,
S.

[1] https://github.com/apache/httpd/pull/551

> 
> With kind regards,
> 
> Bernard Spil
> (maintainer of Apache httpd and OpenSSL in FreeBSD ports)

OpenPGP_signature.asc (application/pgp-signature, 236 B)