Re: Updating an httpd server on Amazon Linux 2 for TLSv1.3?

--000000000000c8ffc1064d2b85b7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

On Mon, Mar 16, 2026 at 5:57=E2=80=AFPM James H. H. Lampert via users <
[email protected]> wrote:

> On Mon, Mar 16, 2026 at 5:10=E2=80=AFPM I wrote:
> . . .
> >> Amazon tells me that if I want openssl 1.1, I need to install it
> >> separately. And when I did a Google search on how to switch httpd
> >> over to a separately installed openssl 1.1, everything I got said
> >> "compile from source."
> >>
> >> How on Earth would I do that, without having any development tools
> >> on the instance?
> >>
> >> Can somebody point me to a path-of-least-resistance?
>
> And on 3/16/26 2:21 PM, Frank Gingras wrote:
>
> > Installing openssl 1.1 and rebuilding httpd is likely the sanest
> > approach here.
>
> Thanks for getting back to me so quickly, but . . .
>
> Having never actually done an httpd rebuild before, I have no idea
> whether the Amazon Linux 2 instance in question is currently capable of
> it, or what else needs to be installed if it's not currently capable.
>
> --
> James H. H. Lampert
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
>
You likely need to install the -devel packages if the headers are not
included in the main install base, or if the packages are stripped.
httpd uses the configure script, which should be able to find all
dependencies, or yell if one of them isn't met.

The short answer is that you'll need apr and apr-util, as well as openssl
headers.

--000000000000c8ffc1064d2b85b7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote g=
mail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Mar 16,=
 2026 at 5:57=E2=80=AFPM James H. H. Lampert via users &lt;<a href=3D"mailt=
o:[email protected]">[email protected]</a>&gt; wrote:<br></div><b=
lockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-le=
ft:1px solid rgb(204,204,204);padding-left:1ex">On Mon, Mar 16, 2026 at 5:1=
0=E2=80=AFPM I wrote:<br>
. . .<br>
&gt;&gt; Amazon tells me that if I want openssl 1.1, I need to install it <=
br>
&gt;&gt; separately. And when I did a Google search on how to switch httpd<=
br>
&gt;&gt; over to a separately installed openssl 1.1, everything I got said<=
br>
&gt;&gt; &quot;compile from source.&quot;<br>
&gt;&gt; <br>
&gt;&gt; How on Earth would I do that, without having any development tools=
<br>
&gt;&gt; on the instance?<br>
&gt;&gt; <br>
&gt;&gt; Can somebody point me to a path-of-least-resistance?<br>
<br>
And on 3/16/26 2:21 PM, Frank Gingras wrote:<br>
<br>
&gt; Installing openssl 1.1 and rebuilding httpd is likely the sanest<br>
&gt; approach here.<br>
<br>
Thanks for getting back to me so quickly, but . . .<br>
<br>
Having never actually done an httpd rebuild before, I have no idea <br>
whether the Amazon Linux 2 instance in question is currently capable of <br=
>
it, or what else needs to be installed if it&#39;s not currently capable.<b=
r>
<br>
--<br>
James H. H. Lampert<br>
<br>
---------------------------------------------------------------------<br>
To unsubscribe, e-mail: <a href=3D"mailto:[email protected]=
g" target=3D"_blank">[email protected]</a><br>
For additional commands, e-mail: <a href=3D"mailto:[email protected].=
org" target=3D"_blank">[email protected]</a><br>
<br></blockquote><div><br></div><div>You likely need to install the -devel =
packages if the headers are not included in the main install base, or if th=
e packages are stripped.</div><div>httpd uses the configure script, which s=
hould be able to find all dependencies, or yell if one of them isn&#39;t me=
t.</div><div><br></div><div>The short answer is that you&#39;ll need apr an=
d apr-util, as well as openssl headers.=C2=A0</div></div></div>

--000000000000c8ffc1064d2b85b7--