Re: Updating an httpd server on Amazon Linux 2 for TLSv1.3?
Frank Gingras <[email protected]> Tue, 17 Mar 2026 09:53:19 -0400
| Newsgroups | gmane.comp.apache.user |
|---|---|
| Message-ID | <CAOY50mtgOLJDbVk9jWahLsdyR5K6H=Wcr_qrXDcV-R7Af5bfnw@mail.gmail.com> |
--0000000000002285db064d38a938 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable On Tue, Mar 17, 2026 at 7:33=E2=80=AFAM E.S. Rosenberg <es.rosenberg@gmail.= com> wrote: > Sorry but - > In what world is building httpd/openssl from source saner than upgrading > your distro that is going EOL in 3 month? > The distro upgrade/switch work is anyhow about to be inevitable so you ma= y > as well start it before you are forced even more than you are now. > > HTH, > Eliyahu - =D7=90=D7=9C=D7=99=D7=94=D7=95 > > Amazon Linux 2 is going EOL in June 2026 - > https://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-20251208.html > > Op di 17 mrt 2026 om 00:13 schreef Frank Gingras <[email protected]>: > >> >> >> On Mon, Mar 16, 2026 at 5:57=E2=80=AFPM James H. H. Lampert via users < >> [email protected]> wrote: >> >>> On Mon, Mar 16, 2026 at 5:10=E2=80=AFPM I wrote: >>> . . . >>> >> Amazon tells me that if I want openssl 1.1, I need to install it >>> >> separately. And when I did a Google search on how to switch httpd >>> >> over to a separately installed openssl 1.1, everything I got said >>> >> "compile from source." >>> >> >>> >> How on Earth would I do that, without having any development tools >>> >> on the instance? >>> >> >>> >> Can somebody point me to a path-of-least-resistance? >>> >>> And on 3/16/26 2:21 PM, Frank Gingras wrote: >>> >>> > Installing openssl 1.1 and rebuilding httpd is likely the sanest >>> > approach here. >>> >>> Thanks for getting back to me so quickly, but . . . >>> >>> Having never actually done an httpd rebuild before, I have no idea >>> whether the Amazon Linux 2 instance in question is currently capable of >>> it, or what else needs to be installed if it's not currently capable. >>> >>> -- >>> James H. H. Lampert >>> >>> --------------------------------------------------------------------- >>> To unsubscribe, e-mail: [email protected] >>> For additional commands, e-mail: [email protected] >>> >>> >> You likely need to install the -devel packages if the headers are not >> included in the main install base, or if the packages are stripped. >> httpd uses the configure script, which should be able to find all >> dependencies, or yell if one of them isn't met. >> >> The short answer is that you'll need apr and apr-util, as well as openss= l >> headers. >> > Indeed, using an EOL distribution is a bad idea. The focus on my answers was on building support on ancient systems, in the event that it can't be upgraded. --0000000000002285db064d38a938 Content-Type: text/html; charset="UTF-8" Content-Transfer-Encoding: quoted-printable <div dir=3D"ltr"><div dir=3D"ltr"><br></div><br><div class=3D"gmail_quote g= mail_quote_container"><div dir=3D"ltr" class=3D"gmail_attr">On Tue, Mar 17,= 2026 at 7:33=E2=80=AFAM E.S. Rosenberg <<a href=3D"mailto:es.rosenberg@= gmail.com">[email protected]</a>> wrote:<br></div><blockquote class= =3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rg= b(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div>Sorry but -</div><di= v>In what world is building httpd/openssl from source saner than upgrading = your distro that is going EOL in 3 month?</div><div>The distro upgrade/swit= ch work is anyhow about to be inevitable so you may as well start it before= you are forced even more than you are now.</div><div><br></div><div>HTH,</= div><div>Eliyahu - =D7=90=D7=9C=D7=99=D7=94=D7=95</div><div><br></div><div>= Amazon Linux 2 is going EOL in June 2026 -=C2=A0<a href=3D"https://docs.aws= .amazon.com/AL2/latest/relnotes/relnotes-20251208.html" target=3D"_blank">h= ttps://docs.aws.amazon.com/AL2/latest/relnotes/relnotes-20251208.html</a></= div></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D"gmail_at= tr">Op di 17 mrt 2026 om 00:13 schreef Frank Gingras <<a href=3D"mailto:= [email protected]" target=3D"_blank">[email protected]</a>>:<br></div><b= lockquote class=3D"gmail_quote" style=3D"margin:0px 0px 0px 0.8ex;border-le= ft:1px solid rgb(204,204,204);padding-left:1ex"><div dir=3D"ltr"><div dir= =3D"ltr"><br></div><br><div class=3D"gmail_quote"><div dir=3D"ltr" class=3D= "gmail_attr">On Mon, Mar 16, 2026 at 5:57=E2=80=AFPM James H. H. Lampert vi= a users <<a href=3D"mailto:[email protected]" target=3D"_blank">use= [email protected]</a>> wrote:<br></div><blockquote class=3D"gmail_quot= e" style=3D"margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204)= ;padding-left:1ex">On Mon, Mar 16, 2026 at 5:10=E2=80=AFPM I wrote:<br> . . .<br> >> Amazon tells me that if I want openssl 1.1, I need to install it <= br> >> separately. And when I did a Google search on how to switch httpd<= br> >> over to a separately installed openssl 1.1, everything I got said<= br> >> "compile from source."<br> >> <br> >> How on Earth would I do that, without having any development tools= <br> >> on the instance?<br> >> <br> >> Can somebody point me to a path-of-least-resistance?<br> <br> And on 3/16/26 2:21 PM, Frank Gingras wrote:<br> <br> > Installing openssl 1.1 and rebuilding httpd is likely the sanest<br> > approach here.<br> <br> Thanks for getting back to me so quickly, but . . .<br> <br> Having never actually done an httpd rebuild before, I have no idea <br> whether the Amazon Linux 2 instance in question is currently capable of <br= > it, or what else needs to be installed if it's not currently capable.<b= r> <br> --<br> James H. H. Lampert<br> <br> ---------------------------------------------------------------------<br> To unsubscribe, e-mail: <a href=3D"mailto:[email protected]= g" target=3D"_blank">[email protected]</a><br> For additional commands, e-mail: <a href=3D"mailto:[email protected].= org" target=3D"_blank">[email protected]</a><br> <br></blockquote><div><br></div><div>You likely need to install the -devel = packages if the headers are not included in the main install base, or if th= e packages are stripped.</div><div>httpd uses the configure script, which s= hould be able to find all dependencies, or yell if one of them isn't me= t.</div><div><br></div><div>The short answer is that you'll need apr an= d apr-util, as well as openssl headers.=C2=A0</div></div></div></blockquote= ></div></blockquote><div><br></div><div>Indeed, using an EOL distribution i= s a bad idea. The focus on my answers was on building support on ancient sy= stems, in the event that it can't be upgraded.</div><div><br></div><div= ><br></div></div></div> --0000000000002285db064d38a938--