Re: Updating an httpd server on Amazon Linux 2 for TLSv1.3?
"E.S. Rosenberg" <[email protected]> Tue, 17 Mar 2026 13:33:03 +0200
| Newsgroups | gmane.comp.apache.user |
|---|---|
| Message-ID | <CAHxFV_uoY+=Pv_s=2Td-KtAf5pefeFAjzfpcnHF8XG0acb7j9A@mail.gmail.com> |
--000000000000757205064d36b395 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable Sorry but - In what world is building httpd/openssl from source saner than upgrading your distro that is going EOL in 3 month? The distro upgrade/switch work is anyhow about to be inevitable so you may as well start it before you are forced even more than you are now. HTH, Eliyahu - =D7=90=D7=9C=D7=99=D7=94=D7=95 Amazon Linux 2 is going EOL in June 2026 - https://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-20251208.html Op di 17 mrt 2026 om 00:13 schreef Frank Gingras <[email protected]>: > > > On Mon, Mar 16, 2026 at 5:57=E2=80=AFPM James H. H. Lampert via users < > [email protected]> wrote: > >> On Mon, Mar 16, 2026 at 5:10=E2=80=AFPM I wrote: >> . . . >> >> Amazon tells me that if I want openssl 1.1, I need to install it >> >> separately. And when I did a Google search on how to switch httpd >> >> over to a separately installed openssl 1.1, everything I got said >> >> "compile from source." >> >> >> >> How on Earth would I do that, without having any development tools >> >> on the instance? >> >> >> >> Can somebody point me to a path-of-least-resistance? >> >> And on 3/16/26 2:21 PM, Frank Gingras wrote: >> >> > Installing openssl 1.1 and rebuilding httpd is likely the sanest >> > approach here. >> >> Thanks for getting back to me so quickly, but . . . >> >> Having never actually done an httpd rebuild before, I have no idea >> whether the Amazon Linux 2 instance in question is currently capable of >> it, or what else needs to be installed if it's not currently capable. >> >> -- >> James H. H. Lampert >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: [email protected] >> For additional commands, e-mail: [email protected] >> >> > You likely need to install the -devel packages if the headers are not > included in the main install base, or if the packages are stripped. > httpd uses the configure script, which should be able to find all > dependencies, or yell if one of them isn't met. > > The short answer is that you'll need apr and apr-util, as well as openssl > headers. > --000000000000757205064d36b395 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div>Sorry but -</div><div>In what world is building httpd= /openssl from source saner than upgrading your distro that is going EOL in = 3 month?</div><div>The distro upgrade/switch work is anyhow about to be ine= vitable so you may as well start it before you are forced even more than yo= u are now.</div><div><br></div><div>HTH,</div><div>Eliyahu - =D7=90=D7=9C= =D7=99=D7=94=D7=95</div><div><br></div><div>Amazon Linux 2 is going EOL in = June 2026 -=C2=A0<a href=3D"https://docs.aws.amazon.com/AL2/latest/relnotes= /relnotes-20251208.html">https://docs.aws.amazon.com/AL2/latest/relnotes/re= lnotes-20251208.html</a></div></div><br><div class=3D"gmail_quote gmail_quo= te_container"><div dir=3D"ltr" class=3D"gmail_attr">Op di 17 mrt 2026 om 00= :13 schreef Frank Gingras <<a href=3D"mailto:[email protected]">thumbs@a= pache.org</a>>:<br></div><blockquote class=3D"gmail_quote" style=3D"marg= in:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1e= x"><div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quot= e"><div dir=3D"ltr" class=3D"gmail_attr">On Mon, Mar 16, 2026 at 5:57=E2=80= =AFPM James H. H. Lampert via users <<a href=3D"mailto:[email protected]= e.org" target=3D"_blank">[email protected]</a>> wrote:<br></div><bl= ockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-lef= t:1px solid rgb(204,204,204);padding-left:1ex">On Mon, Mar 16, 2026 at 5:10= =E2=80=AFPM I wrote:<br> . . .<br> >> Amazon tells me that if I want openssl 1.1, I need to install it <= br> >> separately. And when I did a Google search on how to switch httpd<= br> >> over to a separately installed openssl 1.1, everything I got said<= br> >> "compile from source."<br> >> <br> >> How on Earth would I do that, without having any development tools= <br> >> on the instance?<br> >> <br> >> Can somebody point me to a path-of-least-resistance?<br> <br> And on 3/16/26 2:21 PM, Frank Gingras wrote:<br> <br> > Installing openssl 1.1 and rebuilding httpd is likely the sanest<br> > approach here.<br> <br> Thanks for getting back to me so quickly, but . . .<br> <br> Having never actually done an httpd rebuild before, I have no idea <br> whether the Amazon Linux 2 instance in question is currently capable of <br= > it, or what else needs to be installed if it's not currently capable.<b= r> <br> --<br> James H. H. Lampert<br> <br> ---------------------------------------------------------------------<br> To unsubscribe, e-mail: <a href=3D"mailto:[email protected]= g" target=3D"_blank">[email protected]</a><br> For additional commands, e-mail: <a href=3D"mailto:[email protected].= org" target=3D"_blank">[email protected]</a><br> <br></blockquote><div><br></div><div>You likely need to install the -devel = packages if the headers are not included in the main install base, or if th= e packages are stripped.</div><div>httpd uses the configure script, which s= hould be able to find all dependencies, or yell if one of them isn't me= t.</div><div><br></div><div>The short answer is that you'll need apr an= d apr-util, as well as openssl headers.=C2=A0</div></div></div> </blockquote></div> --000000000000757205064d36b395--