Fwd: [ANNOUNCEMENT] Apache HTTP Server 2.4.63 Released

[Paul Smedley]

Hey all,

Not very tested..... but https://smedley.id.au/tmp/httpd-2.4.63-os2-debug-20250427.zip

needs openssl 3.4 from netlabs-exp and possible some other dependencies.

Built with GCC 15.1.0 and on my bare metal machine (first apache2 build on this box).

Not (yet) tested with PHP...

Cheers,

Paul

-------- Forwarded Message --------

Subject:	[ANNOUNCEMENT] Apache HTTP Server 2.4.63 Released
Date:	Thu, 23 Jan 2025 15:55:21 -0500
From:	jim <j...@apache.org>
Reply-To:	d...@httpd.apache.org
To:	anno...@httpd.apache.org

Apache HTTP Server 2.4.63 Released

January 23, 2025

The Apache Software Foundation and the Apache HTTP Server Project
are pleased to announce the release of version 2.4.63 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
recommended over all previous releases. This release of Apache is
a security, feature and bug fix release.

We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.

Apache HTTP Server 2.4.63 is available for download from:

https://httpd.apache.org/download.cgi

Apache 2.4 offers numerous enhancements, improvements, and performance
boosts over the 2.2 codebase. For an overview of new features
introduced since 2.4 please see:

https://httpd.apache.org/docs/trunk/new_features_2_4.html

Please see the CHANGES_2.4 file, linked from the download page, for a
full list of changes. A condensed list, CHANGES_2.4.63 includes only
those changes introduced since the prior 2.4 release. A summary of all of the security vulnerabilities addressed in this and earlier releases is available:

https://httpd.apache.org/security/vulnerabilities_24.html

This release requires the Apache Portable Runtime (APR), minimum
version 1.5.x, and APR-Util, minimum version 1.5.x. Some features may
require the 1.6.x version of both APR and APR-Util. The APR libraries
must be upgraded for all features of httpd to operate correctly.

This release builds on and extends the Apache 2.2 API. Modules written
for Apache 2.2 will need to be recompiled in order to run with Apache
2.4, and require minimal or no source code changes.

https://svn.apache.org/repos/asf/httpd/httpd/trunk/VERSIONING

When upgrading or installing this version of Apache, please bear in mind
that if you intend to use Apache with one of the threaded MPMs (other
than the Prefork MPM), you must ensure that any modules you will be
using (and the libraries they depend on) are thread-safe.

Please note the 2.2.x branch has now passed the end of life at the Apache
HTTP Server project and no further activity will occur including security
patches. Users must promptly complete their transitions to this 2.4.x
release of httpd to benefit from further bug fixes or new features.



--
To unsubscribe from this announcement list, send a mail to
<announce-u...@httpd.apache.org> from your subscribed address.

[David McKenna]

 Thanks Paul - gave this a try with php 8.1.31, but it it immediately crashes - no POPUPLOG and no server logs, just an exceptq report which I will attach. I have the new Openssl3 installed, and starting from command line doesn't complain of any missing libraries...

[Paul Smedley]

Darn it.... I wasn't able to test with PHP as I don't have a working setup on the bare metal machine.

I've just built PHP 8.1.32 using openssl3 - so will test with that combination

--
You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/apache2/ea45df8e-6acd-497f-b70f-0544af1adab6n%40googlegroups.com.

[Paul Smedley]

OK.... with https://smedley.id.au/tmp/php-8.1.32-os2-20250428.zip it seems to start/work - I haven't (yet) been able to confirm sql connections work. Need to setup mysql on the baremetal machine or convince my primary mysql install to allow connections from the OS/2 box.

sodium module is missing as it's crashing...

[Paul Smedley]

Needs an updated PHP too..

OK.... with https://smedley.id.au/tmp/php-8.1.32-os2-20250428.zip it seems to start/work - I haven't (yet) been able to confirm sql connections work. Need to setup mysql on the baremetal machine or convince my primary mysql install to allow connections from the OS/2 box.

[Massimo S.]

Hi,

does it means this build of apache is not compatible php 7?

mssimo

> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to

> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.

> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/af7f7c38-20d0-4c92-8ac2-f9c260138f39%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/af7f7c38-20d0-4c92-8ac2-f9c260138f39%40smedley.id.au?utm_medium=email&utm_source=footer>.

[David McKenna]

Thanks again Paul - I'll give this php a try too. By your last comment did you mean we need an updated MySQL too?

Regards,

[Massimo S.]

we are running very old builds of mysql, soon or later this will happen
i'm still on 5.1.73 and i plan to upgrade to 5.6.x

i still have to do it since about 2 years :)

anyway i've not understand if apache is compatible with php7

massimo

> https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com
> <https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Not without php 7 being rebuilt to also use the newer ssl

[Paul Smedley]

Nah, the mysql instance for my site runs on a linux box. To test mantis with the rebuilt apache2/php I attempted to setup mantis on the OS/2 box to talk to the linux box. However I'm getting connection refused even though I updated mysql to allow connections from other IPs than localhost (or at least I thought I did!)

To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com.

[Massimo S.]

Il 28/04/2025 23:01, Paul Smedley ha scritto:
> Not without php 7 being rebuilt to also use the newer ssl

that's possible or impossible?

since upgrade to php 8.1.x will probably break a number of websites here

Server Version: Apache/2.4.61 (OS/2) OpenSSL/1.1.1s PHP/7.4.32
Server Built: Jul 7 2024 16:56:21

massimo

[Paul Smedley]

Anything is possible, it's more a case of how probable it is. If it's a simple rebuild the probability increases, if it won't compile due to changes in openssl, it becomes less probable.

[Steven Levine]

In <b6a76ea0-4114-4919...@smedley.id.au>, on 04/27/25
at 09:49 AM, Paul Smedley <pa...@smedley.id.au> said:

Hi all,

>Not very tested..... but
>https://smedley.id.au/tmp/httpd-2.4.63-os2-debug-20250427.zip

It seems to be working here with php 7 and httpd reports itself as

Apache/2.4.63 (OS/2) PHP/7.4.32 OpenSSL/3.4.1

I will be updating to php8 soon. This was already on my list.

I did not want to pull in too much from netlabs-exp, so I did a limited
update and installed only Ossl3.dll and crypto3.dll.

I don't know if it matters, but it appears that dialup.dll did not get
built or the new build did not make it into the arhive. The archive
contains

05-27-22 16:03 48,762 0 dialup.dll

Thanks,

Steven

--
----------------------------------------------------------------------
"Steven Levine" <ste...@earthlink.net> Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------

[David McKenna]

Hey Paul,

  Still having trouble, but there is progress: I can run with no problem using httpd 2.4.61 and php 8.1.32 and everything works. But if I try to use httpd 2.4.62 with php 8.1.32, it starts just fine, but as soon as I try to open a web page from it, it crashes. I'll attach the logs from the crash...

Regards,

[David McKenna]

Hmmm.. well, everything is not working. Getting some strange errors in php_errors.log that imply some php module DLL's are mis-named. Attached.

Regards,

[Paul Smedley]

Some of those are due to dependencies RC of 2 is a missing file. This PHP is built in an rpm environment, so depends on some rpm libraries.

pq.dll is from my postgresql build - are you runnings any postgresql databases? If not, why are you loading the modules?

[Massimo S.]

Yes, i strongly suggest with Apache to review the used modules and disable what is not needed.

This improves memory usage, performances, security and stability.

massimo

> www.scoug.com <http://www.scoug.com> www.arcanoae.com <http://www.arcanoae.com> www.warpcave.com
> <http://www.warpcave.com>
> ----------------------------------------------------------------------

>
> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.
> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/7F57C6FC-4287-4D3B-A26F-64EC5594789D%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/7F57C6FC-4287-4D3B-A26F-64EC5594789D%40smedley.id.au?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Hi again,

Bit more detail now I'm at home and not on the phone: The additional ".DLL" is the module loading code in php

From the log:

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'imagick.dll' (tried: C:/Programs/php8/modules/imagick.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL), C:/Programs/php8/modules/imagick.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL.DLL)) in Unknown on line 0

This one just seems to be a missing C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL - imagick.dll isn't part of the PHP distro, it is built/distributed separately.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_pgsq.dll' (tried: C:/Programs/php8/modules/pdo_pgsq.dll (dlopen rc=2 extra=PQ), C:/Programs/php8/modules/pdo_pgsq.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\PDO_PGSQ.DLL.DLL)) in Unknown on line 0

Per "dlopen rc=2 extra=PQ" - missing pq.dll which comes from my postgresql builds. This was previously statically linked.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'pgsql.dll' (tried: C:/Programs/php8/modules/pgsql.dll (dlopen rc=2 extra=PQ), C:/Programs/php8/modules/pgsql.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\PGSQL.DLL.DLL)) in Unknown on line 0

As above.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'sodium.dll' (tried: C:/Programs/php8/modules/sodium.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\SODIUM.DLL), C:/Programs/php8/modules/sodium.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\SODIUM.DLL.DLL)) in Unknown on line 0

As above.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'zip.dll' (tried: C:/Programs/php8/modules/zip.dll (dlopen rc=2 extra=ZIP5), C:/Programs/php8/modules/zip.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\ZIP.DLL.DLL)) in Unknown on line 0
Missing zip5.dll - from libzip-1.11.3-2.oc00.pentium4 : C library for reading, creating, and modifying

[David McKenna]

Thanks for having a look, Paul. I added the imagick.dll (must have been deleted when I copied over the new version of php), commented out the postgres modules from php.ini (probably a legacy of when php was originally installed  - I didn't know what they were for, and it worked, so if it works, then I don't fix it), installed libzip (don't think it was needed before) and copied over sodium.dll from the previous version of php8.1 (is it even needed?) and now php 8.1 runs without complaint with httpd 2.4.61. With these changes, I'll try 2.4.62 again.

Regards,

[David McKenna]

 Tried with 2.4.63 with php 8.1.32 and now it starts without crashing, but it won't serve any web page and creates a lot of exceptq files while running. I'll attach some and logs too...

Regards,

[David McKenna]

 Did some reading on Wordpress, phpMyAdmin and FileGator (the php apps I use), and so eliminated all unnecessary modules in both my apache and php conf files  Everything works with apache 2.4.61 and php 8.1.31, but I can't get any page to load with either apache 2.4.63 or php 8.1.32 (or both). So I decided to try and start from scratch with apache 2.4.63.

 On my desktop machine I loaded apache 2.4.63 without php or ssl and a very minimal set of modules. The page to be served is just an image and one line of text. It starts fine, but when I try to view the page I get an error : 'The connection to the server was reset while the page was loading' and exactly 10 pairs of the attached logs are created every time I try to load the page. The server stays up though, and no POPUPLOG is created. Something isn't quite right...

Regards,

[Steven Levine]

In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
at 02:11 PM, David McKenna <davidmc...@gmail.com> said:

Hi all,

One of the web apps i maintain needed some updates, so I installed 2.4.63
and can confirm that 2.4.63 failed that same way here. The exceptq report
indicates somehing is wrong with he mmap interface. I'll try to carve out
some time to figure out exactly what is triggering the failure.

[Steven Levine]

In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
at 02:11 PM, David McKenna <davidmc...@gmail.com> said:

Hi all,

Quick update. We are dieing because get_file_desc_ex is being called with
a NULL path argument.

This is probably via the call at

src\mmap\mmap.c:324
fdesc = get_file_desc(fildes, pFH->pszNativePath);

More later...

[Paul Smedley]

Hey folks,

On 13/6/25 14:36, Steven Levine wrote:
> In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
> at 02:11 PM, David McKenna <davidmc...@gmail.com> said:
>
> Hi all,
>
> Quick update. We are dieing because get_file_desc_ex is being called with
> a NULL path argument.
>
> This is probably via the call at
>
> src\mmap\mmap.c:324
> fdesc = get_file_desc(fildes, pFH->pszNativePath);
>
> More later...

Will try look at this today - I previously tried to disable mmap usage
in apr......

[Massimo S.]

Hi Paul,

if apache 2.4.62 is just a recompile of some minutes since is not changed a lot from
2.4.61 should be possible to have the binaries?

Please

massimo

> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.
> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/b6a76ea0-4114-4919-b003-09ba8b7bef95%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/b6a76ea0-4114-4919-b003-09ba8b7bef95%40smedley.id.au?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Why build 2.4.62 when 2.4.63? Sounds like a WOFTAM...

[Massimo S.]

I'm sorry i tought that 2.4.63 has issues or requires some API that
we don't have at the moment.

massimo

[Steven Levine]

In <6f7a541f-b6f9-701f...@ecomstation.it>, on 06/20/25
at 09:27 AM, "Massimo S." <m...@ecomstation.it> said:

Hi Massimo,

>if apache 2.4.62 is just a recompile of some minutes since is not changed
>a lot from 2.4.61 should be possible to have the binaries?

Why?

What issue do you have that you that 2.4.62 fixes according to the release
notes?

FWIW, you appear to continue to have several massive holes in your
knowledge of the time and costs of porting apps such as apache httpd. I
recommend you invest some time in understanding the basics, even if it's
only at the executive overview level.

[Steven Levine]

In <09bf5692-b2a3-4871...@smedley.id.au>, on 06/20/25

at 05:50 PM, Paul Smedley <pa...@smedley.id.au> said:

>Why build 2.4.62 when 2.4.63? Sounds like a WOFTAM...

ROTF.

[Steven Levine]

In <3e26db8f-6ecc-6052...@ecomstation.it>, on 06/20/25
at 10:31 AM, "Massimo S." <m...@ecomstation.it> said:

Hi,

>I'm sorry i tought that 2.4.63 has issues or requires some API that we
>don't have at the moment.

Rather than depending on your uncertain memmory, why not review the
message thread before posting?

The rest of us have put time in to test 2.4.63 and have reported our
findings.

[Massimo S.]

Il 20/06/2025 22:05, Steven Levine ha scritto:
> In <3e26db8f-6ecc-6052...@ecomstation.it>, on 06/20/25
> at 10:31 AM, "Massimo S." <m...@ecomstation.it> said:
>
> Hi,
>
>> I'm sorry i tought that 2.4.63 has issues or requires some API that we
>> don't have at the moment.
>
> Rather than depending on your uncertain memmory, why not review the
> message thread before posting?
>
> The rest of us have put time in to test 2.4.63 and have reported our
> findings.
>
> Steven

Agree.

I can't use it on the webserver with php since i still have 7.4.32
and i can't upgrade to 8 at the moment, i've read that php 8 is mandatory.

Anyway i can test it on the other webserver that use just plain html/js (and don't use php), i get:

httpd: Syntax error on line 210 of d:\\apache/conf/httpd.conf: Cannot load modules/ssl.dll into server:
SYS0002: The system cannot find the file specified. (OSSL3)

Maybe the ssl libraries \user\lib must be upgraded.

But it's possible to run apache 2.4.61 if update the ssl DLLs?
In the case i've to fall back to 2.4.61?

massimo

[Steven Levine]

In <30d5c50f-c153-6cb1...@ecomstation.it>, on 06/21/25
at 11:49 AM, "Massimo S." <m...@ecomstation.it> said:

Hi Massimo,

>Anyway i can test it on the other webserver that use just plain html/js
>(and don't use php), i get:

>httpd: Syntax error on line 210 of d:\\apache/conf/httpd.conf: Cannot
>load modules/ssl.dll into server: SYS0002: The system cannot find the
>file specified. (OSSL3)

>Maybe the ssl libraries \user\lib must be upgraded.

You think?

>But it's possible to run apache 2.4.61 if update the ssl DLLs?

That's what I did. FWIW, the package was in experimental when I installed
it, so I made sure I would be able to back it out if I caused problems,
just in case.

BTW, I think you meant to type is it, rather than it's.

>In the
>case i've to fall back to 2.4.61?

That's what I did.