Apache 2.4 – Compatibility with OpenSSL

apache-2.4mod-sslopenssl

We run Apache HTTPD as a load balancer in production, using mod_ssl with OpenSSL. Whilst trying to compile the latest Apache version (2.4.41) we've hit problems with OpenSSL whilst building.

My question is, is there an official source for compatibility between OpenSSL and Apache HTTPD?

Apologies is I'm missing something simple here, but all I can find is the occasional mention of non-compatibility between various versions, rather than any definitive answer for what is tested and supported.

Best Answer

I think this is the official source (there is normally an entry when a new version is supported or implemented [newest features]) and also if some version gets out of support. https://www.apache.org/dist/httpd/CHANGES_2.4 Also You can find fixed bugs related to specific OpenSSL versions or features.

Related Solutions

Security – How to enable TLS 1.1 and 1.2 with OpenSSL and Apache

TLS1.2 is now available for apache, to add TLSs1.2 you just need to add in your https virtual host configuration:

SSLProtocol -all +TLSv1.2

-all is removing other ssl protocol (SSL 1,2,3 TLS1)

+TLSv1.2 is adding TLS 1.2

for more browser compatibility you can use

SSLProtocol -all +TLSv1 +TLSv1.1 +TLSv1.2

by the way you can increase the Cipher suite too using:

SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:ECDHE-RSA-AES128-SHA:DHE-RSA-AES128-GCM-SHA256:AES256+EDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GC$

You can test your https website security with an online scanner like: https://www.ssllabs.com/ssltest/index.html

Ssl – set the SSLInsecureRenegotiation Directive with SetEnvIf

You need to apply an update to your NetScaler hosts as described in Citrix security bulletin CTX123359.

Appliance firmware version 8.1, build 68.7 or later, and version 9.1, build 99.8 or later.

Best Answer

Related Solutions

Security – How to enable TLS 1.1 and 1.2 with OpenSSL and Apache

Ssl – set the SSLInsecureRenegotiation Directive with SetEnvIf

Related Topic