Fwd: [ANNOUNCEMENT] Apache HTTP Server 2.4.63 Released

[Paul Smedley]

Hey all,

Not very tested..... but https://smedley.id.au/tmp/httpd-2.4.63-os2-debug-20250427.zip

needs openssl 3.4 from netlabs-exp and possible some other dependencies.

Built with GCC 15.1.0 and on my bare metal machine (first apache2 build on this box).

Not (yet) tested with PHP...

Cheers,

Paul

-------- Forwarded Message --------

Subject:	[ANNOUNCEMENT] Apache HTTP Server 2.4.63 Released
Date:	Thu, 23 Jan 2025 15:55:21 -0500
From:	jim <j...@apache.org>
Reply-To:	d...@httpd.apache.org
To:	anno...@httpd.apache.org

Apache HTTP Server 2.4.63 Released

January 23, 2025

The Apache Software Foundation and the Apache HTTP Server Project
are pleased to announce the release of version 2.4.63 of the Apache
HTTP Server ("Apache"). This version of Apache is our latest GA
release of the new generation 2.4.x branch of Apache HTTPD and
represents fifteen years of innovation by the project, and is
recommended over all previous releases. This release of Apache is
a security, feature and bug fix release.

We consider this release to be the best version of Apache available, and
encourage users of all prior versions to upgrade.

Apache HTTP Server 2.4.63 is available for download from:

https://httpd.apache.org/download.cgi

Apache 2.4 offers numerous enhancements, improvements, and performance
boosts over the 2.2 codebase. For an overview of new features
introduced since 2.4 please see:

https://httpd.apache.org/docs/trunk/new_features_2_4.html

Please see the CHANGES_2.4 file, linked from the download page, for a
full list of changes. A condensed list, CHANGES_2.4.63 includes only
those changes introduced since the prior 2.4 release. A summary of all of the security vulnerabilities addressed in this and earlier releases is available:

https://httpd.apache.org/security/vulnerabilities_24.html

This release requires the Apache Portable Runtime (APR), minimum
version 1.5.x, and APR-Util, minimum version 1.5.x. Some features may
require the 1.6.x version of both APR and APR-Util. The APR libraries
must be upgraded for all features of httpd to operate correctly.

This release builds on and extends the Apache 2.2 API. Modules written
for Apache 2.2 will need to be recompiled in order to run with Apache
2.4, and require minimal or no source code changes.

https://svn.apache.org/repos/asf/httpd/httpd/trunk/VERSIONING

When upgrading or installing this version of Apache, please bear in mind
that if you intend to use Apache with one of the threaded MPMs (other
than the Prefork MPM), you must ensure that any modules you will be
using (and the libraries they depend on) are thread-safe.

Please note the 2.2.x branch has now passed the end of life at the Apache
HTTP Server project and no further activity will occur including security
patches. Users must promptly complete their transitions to this 2.4.x
release of httpd to benefit from further bug fixes or new features.



--
To unsubscribe from this announcement list, send a mail to
<announce-u...@httpd.apache.org> from your subscribed address.

[David McKenna]

 Thanks Paul - gave this a try with php 8.1.31, but it it immediately crashes - no POPUPLOG and no server logs, just an exceptq report which I will attach. I have the new Openssl3 installed, and starting from command line doesn't complain of any missing libraries...

[Paul Smedley]

Darn it.... I wasn't able to test with PHP as I don't have a working setup on the bare metal machine.

I've just built PHP 8.1.32 using openssl3 - so will test with that combination

--
You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/apache2/ea45df8e-6acd-497f-b70f-0544af1adab6n%40googlegroups.com.

[Paul Smedley]

OK.... with https://smedley.id.au/tmp/php-8.1.32-os2-20250428.zip it seems to start/work - I haven't (yet) been able to confirm sql connections work. Need to setup mysql on the baremetal machine or convince my primary mysql install to allow connections from the OS/2 box.

sodium module is missing as it's crashing...

[Paul Smedley]

Needs an updated PHP too..

OK.... with https://smedley.id.au/tmp/php-8.1.32-os2-20250428.zip it seems to start/work - I haven't (yet) been able to confirm sql connections work. Need to setup mysql on the baremetal machine or convince my primary mysql install to allow connections from the OS/2 box.

[Massimo S.]

Hi,

does it means this build of apache is not compatible php 7?

mssimo

> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to

> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.

> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/af7f7c38-20d0-4c92-8ac2-f9c260138f39%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/af7f7c38-20d0-4c92-8ac2-f9c260138f39%40smedley.id.au?utm_medium=email&utm_source=footer>.

[David McKenna]

Thanks again Paul - I'll give this php a try too. By your last comment did you mean we need an updated MySQL too?

Regards,

[Massimo S.]

we are running very old builds of mysql, soon or later this will happen
i'm still on 5.1.73 and i plan to upgrade to 5.6.x

i still have to do it since about 2 years :)

anyway i've not understand if apache is compatible with php7

massimo

> https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com
> <https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Not without php 7 being rebuilt to also use the newer ssl

[Paul Smedley]

Nah, the mysql instance for my site runs on a linux box. To test mantis with the rebuilt apache2/php I attempted to setup mantis on the OS/2 box to talk to the linux box. However I'm getting connection refused even though I updated mysql to allow connections from other IPs than localhost (or at least I thought I did!)

To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
To view this discussion visit https://groups.google.com/d/msgid/apache2/d3824409-26c4-46ec-800d-7af0eabd98c4n%40googlegroups.com.

[Massimo S.]

Il 28/04/2025 23:01, Paul Smedley ha scritto:
> Not without php 7 being rebuilt to also use the newer ssl

that's possible or impossible?

since upgrade to php 8.1.x will probably break a number of websites here

Server Version: Apache/2.4.61 (OS/2) OpenSSL/1.1.1s PHP/7.4.32
Server Built: Jul 7 2024 16:56:21

massimo

[Paul Smedley]

Anything is possible, it's more a case of how probable it is. If it's a simple rebuild the probability increases, if it won't compile due to changes in openssl, it becomes less probable.

[Steven Levine]

In <b6a76ea0-4114-4919...@smedley.id.au>, on 04/27/25
at 09:49 AM, Paul Smedley <pa...@smedley.id.au> said:

Hi all,

>Not very tested..... but
>https://smedley.id.au/tmp/httpd-2.4.63-os2-debug-20250427.zip

It seems to be working here with php 7 and httpd reports itself as

Apache/2.4.63 (OS/2) PHP/7.4.32 OpenSSL/3.4.1

I will be updating to php8 soon. This was already on my list.

I did not want to pull in too much from netlabs-exp, so I did a limited
update and installed only Ossl3.dll and crypto3.dll.

I don't know if it matters, but it appears that dialup.dll did not get
built or the new build did not make it into the arhive. The archive
contains

05-27-22 16:03 48,762 0 dialup.dll

Thanks,

Steven

--
----------------------------------------------------------------------
"Steven Levine" <ste...@earthlink.net> Warp/DIY/BlueLion etc.
www.scoug.com www.arcanoae.com www.warpcave.com
----------------------------------------------------------------------

[David McKenna]

Hey Paul,

  Still having trouble, but there is progress: I can run with no problem using httpd 2.4.61 and php 8.1.32 and everything works. But if I try to use httpd 2.4.62 with php 8.1.32, it starts just fine, but as soon as I try to open a web page from it, it crashes. I'll attach the logs from the crash...

Regards,

[David McKenna]

Hmmm.. well, everything is not working. Getting some strange errors in php_errors.log that imply some php module DLL's are mis-named. Attached.

Regards,

[Paul Smedley]

Some of those are due to dependencies RC of 2 is a missing file. This PHP is built in an rpm environment, so depends on some rpm libraries.

pq.dll is from my postgresql build - are you runnings any postgresql databases? If not, why are you loading the modules?

[Massimo S.]

Yes, i strongly suggest with Apache to review the used modules and disable what is not needed.

This improves memory usage, performances, security and stability.

massimo

> www.scoug.com <http://www.scoug.com> www.arcanoae.com <http://www.arcanoae.com> www.warpcave.com
> <http://www.warpcave.com>
> ----------------------------------------------------------------------

>
> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.
> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/7F57C6FC-4287-4D3B-A26F-64EC5594789D%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/7F57C6FC-4287-4D3B-A26F-64EC5594789D%40smedley.id.au?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Hi again,

Bit more detail now I'm at home and not on the phone: The additional ".DLL" is the module loading code in php

From the log:

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'imagick.dll' (tried: C:/Programs/php8/modules/imagick.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL), C:/Programs/php8/modules/imagick.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL.DLL)) in Unknown on line 0

This one just seems to be a missing C:\PROGRAMS\PHP8\MODULES\IMAGICK.DLL - imagick.dll isn't part of the PHP distro, it is built/distributed separately.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'pdo_pgsq.dll' (tried: C:/Programs/php8/modules/pdo_pgsq.dll (dlopen rc=2 extra=PQ), C:/Programs/php8/modules/pdo_pgsq.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\PDO_PGSQ.DLL.DLL)) in Unknown on line 0

Per "dlopen rc=2 extra=PQ" - missing pq.dll which comes from my postgresql builds. This was previously statically linked.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'pgsql.dll' (tried: C:/Programs/php8/modules/pgsql.dll (dlopen rc=2 extra=PQ), C:/Programs/php8/modules/pgsql.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\PGSQL.DLL.DLL)) in Unknown on line 0

As above.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'sodium.dll' (tried: C:/Programs/php8/modules/sodium.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\SODIUM.DLL), C:/Programs/php8/modules/sodium.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\SODIUM.DLL.DLL)) in Unknown on line 0

As above.

[30-Apr-2025 00:16:12 UTC] PHP Warning:  PHP Startup: Unable to load dynamic library 'zip.dll' (tried: C:/Programs/php8/modules/zip.dll (dlopen rc=2 extra=ZIP5), C:/Programs/php8/modules/zip.dll.dll (dlopen rc=2 extra=C:\PROGRAMS\PHP8\MODULES\ZIP.DLL.DLL)) in Unknown on line 0
Missing zip5.dll - from libzip-1.11.3-2.oc00.pentium4 : C library for reading, creating, and modifying

[David McKenna]

Thanks for having a look, Paul. I added the imagick.dll (must have been deleted when I copied over the new version of php), commented out the postgres modules from php.ini (probably a legacy of when php was originally installed  - I didn't know what they were for, and it worked, so if it works, then I don't fix it), installed libzip (don't think it was needed before) and copied over sodium.dll from the previous version of php8.1 (is it even needed?) and now php 8.1 runs without complaint with httpd 2.4.61. With these changes, I'll try 2.4.62 again.

Regards,

[David McKenna]

 Tried with 2.4.63 with php 8.1.32 and now it starts without crashing, but it won't serve any web page and creates a lot of exceptq files while running. I'll attach some and logs too...

Regards,

[David McKenna]

 Did some reading on Wordpress, phpMyAdmin and FileGator (the php apps I use), and so eliminated all unnecessary modules in both my apache and php conf files  Everything works with apache 2.4.61 and php 8.1.31, but I can't get any page to load with either apache 2.4.63 or php 8.1.32 (or both). So I decided to try and start from scratch with apache 2.4.63.

 On my desktop machine I loaded apache 2.4.63 without php or ssl and a very minimal set of modules. The page to be served is just an image and one line of text. It starts fine, but when I try to view the page I get an error : 'The connection to the server was reset while the page was loading' and exactly 10 pairs of the attached logs are created every time I try to load the page. The server stays up though, and no POPUPLOG is created. Something isn't quite right...

Regards,

[Steven Levine]

In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
at 02:11 PM, David McKenna <davidmc...@gmail.com> said:

Hi all,

One of the web apps i maintain needed some updates, so I installed 2.4.63
and can confirm that 2.4.63 failed that same way here. The exceptq report
indicates somehing is wrong with he mmap interface. I'll try to carve out
some time to figure out exactly what is triggering the failure.

[Steven Levine]

In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
at 02:11 PM, David McKenna <davidmc...@gmail.com> said:

Hi all,

Quick update. We are dieing because get_file_desc_ex is being called with
a NULL path argument.

This is probably via the call at

src\mmap\mmap.c:324
fdesc = get_file_desc(fildes, pFH->pszNativePath);

More later...

[Paul Smedley]

Hey folks,

On 13/6/25 14:36, Steven Levine wrote:
> In <f70c20a6-86de-4c83...@googlegroups.com>, on 05/12/25
> at 02:11 PM, David McKenna <davidmc...@gmail.com> said:
>
> Hi all,
>
> Quick update. We are dieing because get_file_desc_ex is being called with
> a NULL path argument.
>
> This is probably via the call at
>
> src\mmap\mmap.c:324
> fdesc = get_file_desc(fildes, pFH->pszNativePath);
>
> More later...

Will try look at this today - I previously tried to disable mmap usage
in apr......

[Massimo S.]

Hi Paul,

if apache 2.4.62 is just a recompile of some minutes since is not changed a lot from
2.4.61 should be possible to have the binaries?

Please

massimo

> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.
> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/b6a76ea0-4114-4919-b003-09ba8b7bef95%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/b6a76ea0-4114-4919-b003-09ba8b7bef95%40smedley.id.au?utm_medium=email&utm_source=footer>.

[Paul Smedley]

Why build 2.4.62 when 2.4.63? Sounds like a WOFTAM...

[Massimo S.]

I'm sorry i tought that 2.4.63 has issues or requires some API that
we don't have at the moment.

massimo

[Steven Levine]

In <6f7a541f-b6f9-701f...@ecomstation.it>, on 06/20/25
at 09:27 AM, "Massimo S." <m...@ecomstation.it> said:

Hi Massimo,

>if apache 2.4.62 is just a recompile of some minutes since is not changed
>a lot from 2.4.61 should be possible to have the binaries?

Why?

What issue do you have that you that 2.4.62 fixes according to the release
notes?

FWIW, you appear to continue to have several massive holes in your
knowledge of the time and costs of porting apps such as apache httpd. I
recommend you invest some time in understanding the basics, even if it's
only at the executive overview level.

[Steven Levine]

In <09bf5692-b2a3-4871...@smedley.id.au>, on 06/20/25

at 05:50 PM, Paul Smedley <pa...@smedley.id.au> said:

>Why build 2.4.62 when 2.4.63? Sounds like a WOFTAM...

ROTF.

[Steven Levine]

In <3e26db8f-6ecc-6052...@ecomstation.it>, on 06/20/25
at 10:31 AM, "Massimo S." <m...@ecomstation.it> said:

Hi,

>I'm sorry i tought that 2.4.63 has issues or requires some API that we
>don't have at the moment.

Rather than depending on your uncertain memmory, why not review the
message thread before posting?

The rest of us have put time in to test 2.4.63 and have reported our
findings.

[Massimo S.]

Il 20/06/2025 22:05, Steven Levine ha scritto:
> In <3e26db8f-6ecc-6052...@ecomstation.it>, on 06/20/25
> at 10:31 AM, "Massimo S." <m...@ecomstation.it> said:
>
> Hi,
>
>> I'm sorry i tought that 2.4.63 has issues or requires some API that we
>> don't have at the moment.
>
> Rather than depending on your uncertain memmory, why not review the
> message thread before posting?
>
> The rest of us have put time in to test 2.4.63 and have reported our
> findings.
>
> Steven

Agree.

I can't use it on the webserver with php since i still have 7.4.32
and i can't upgrade to 8 at the moment, i've read that php 8 is mandatory.

Anyway i can test it on the other webserver that use just plain html/js (and don't use php), i get:

httpd: Syntax error on line 210 of d:\\apache/conf/httpd.conf: Cannot load modules/ssl.dll into server:
SYS0002: The system cannot find the file specified. (OSSL3)

Maybe the ssl libraries \user\lib must be upgraded.

But it's possible to run apache 2.4.61 if update the ssl DLLs?
In the case i've to fall back to 2.4.61?

massimo

[Steven Levine]

In <30d5c50f-c153-6cb1...@ecomstation.it>, on 06/21/25
at 11:49 AM, "Massimo S." <m...@ecomstation.it> said:

Hi Massimo,

>Anyway i can test it on the other webserver that use just plain html/js
>(and don't use php), i get:

>httpd: Syntax error on line 210 of d:\\apache/conf/httpd.conf: Cannot
>load modules/ssl.dll into server: SYS0002: The system cannot find the
>file specified. (OSSL3)

>Maybe the ssl libraries \user\lib must be upgraded.

You think?

>But it's possible to run apache 2.4.61 if update the ssl DLLs?

That's what I did. FWIW, the package was in experimental when I installed
it, so I made sure I would be able to back it out if I caused problems,
just in case.

BTW, I think you meant to type is it, rather than it's.

>In the
>case i've to fall back to 2.4.61?

That's what I did.

[Massimo S.]

Il 27/04/2025 02:19, Paul Smedley ha scritto:
> Hey all,
>
> Not very tested..... but https://smedley.id.au/tmp/httpd-2.4.63-os2-debug-20250427.zip
>
> needs openssl 3.4 from netlabs-exp and possible some other dependencies.
>
> Built with GCC 15.1.0 and on my bare metal machine (first apache2 build on this box).
>
> Not (yet) tested with PHP...
>
> Cheers,
>
> Paul

Yum here (web server without PHP), show:

netlabs-rel | 3.0 kB 00:00
netlabs-rel/primary_ | 2.6 MB 00:11 =-] 223 kB/s | 2.6 MB 00:00 ETA
Pacchetti installati
openssl.i686 1:1.1.1l-1.oc00 installed

is this build compatible?

Since if i give: yum update openssl

It say there's nothing to update.

thanks

massimo

[Paul Smedley]

Nope, you need v3.4 which is apparently still only in netlabs-exp...

[Massimo S.]

Hi Paul,

if it's still on experimental repository is ready for a production environment?

massimo

> --
> You received this message because you are subscribed to the Google Groups "Apache for OS/2" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to
> apache2+u...@googlegroups.com <mailto:apache2+u...@googlegroups.com>.
> To view this discussion visit

> https://groups.google.com/d/msgid/apache2/2361CF76-EC43-423C-8456-94196D840191%40smedley.id.au
> <https://groups.google.com/d/msgid/apache2/2361CF76-EC43-423C-8456-94196D840191%40smedley.id.au?utm_medium=email&utm_source=footer>.

[Paul Smedley]

It's been in exp for over 6 months..... I can't answer as to why, only
bww can....

[Massimo S.]

Nobody can concact this ppl?
They read this ML?

If it is ready for production they should move it to the standard repository, i guess.

massimo

[Lewis G Rosenthal]

Hi...

You are *never* going to find a 3.4 build for i686. You need to change your
architecture to pentium4.

There are *no* new Netlabs i686 builds of *anything* of which I am aware.

GL HTH

--
Lewis
-------------------------------------------------------------
Lewis G Rosenthal, CNA, CLP, CLE, CWTS, EA
Rosenthal & Rosenthal, LLC www.2rosenthals.com
visit my IT blog www.2rosenthals.net/wordpress
-------------------------------------------------------------

[Massimo S.]

thank you, i forgot it

with p4 as platform, it find 1:1.1.1w-1.oc00

Paul, if i update SSL to this level, apache 2.4.61 will still run?

Server Version: Apache/2.4.61 (OS/2) OpenSSL/1.1.1s
Server MPM: mpmt_os2
Server Built: Jul 7 2024 16:56:21

massimo

[Lewis Rosenthal]

No, that will not work.

You need:

openssl-3.4.1-2.oc00

This is in netlabs-exp.

GL

>To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
>To view this discussion visit https://groups.google.com/d/msgid/apache2/10a4a134-4ef0-78f9-a070-38fd7d03e245%40ecomstation.it.

--
Lewis

[Massimo S.]

Lewis, my question was for Paul

if i update openssl from 1.1.1s to 1.1.1w, apache 2.4.61* will still work?

massimo

*

>> Server Version: Apache/2.4.61 (OS/2) OpenSSL/1.1.1s
>> Server MPM: mpmt_os2
>> Server Built: Jul 7 2024 16:56:21

[Paul Smedley]

It *should*.

[Massimo S.]

Unfortunately no, apache don't start anymore, after upgrading openssl from 1.1.1l to 1.1.1w..

" non-recoverable error occurred. The process ended."

in populog.os2:

01-28-2026 13:46:07 SYS2070 PID 008e TID 0001 Slot 003e
HTTPD.EXE
CRYPTO11->LIBCN0.2026
182

i've the latest LIBCN (verified with YUM)

i've downgraded openssl from 1.1.1w to 1.1.1s which anyway is newer than 1.1.1l
and apache works/start again


other info, i don't find the new openssl (after 1.1.1w) in netlabs repository,
maybe it's still on the "test environment"

massimo

[Lewis G Rosenthal]

On 01/28/26 08:01 am, Massimo S. wrote:
> Unfortunately no, apache don't start anymore, after upgrading openssl from
> 1.1.1l to 1.1.1w..
>

Interesting.

> " non-recoverable error occurred. The process ended."
>
> in populog.os2:
>
> 01-28-2026 13:46:07 SYS2070 PID 008e TID 0001 Slot 003e
> HTTPD.EXE
> CRYPTO11->LIBCN0.2026
> 182
>
> i've the latest LIBCN (verified with YUM)
>
> i've downgraded openssl from 1.1.1w to 1.1.1s which anyway is newer than
> 1.1.1l
> and apache works/start again
>

Did you restart the server (the entire box) after upgrading openssl? This
could have been something from 1.1.1s still in memory and the crypto11.dll
from 1.1.1w not aligning (for obvious reasons).

Did you update openssl *and* openssl-libs? If you just use zips and not yum,
you're liable to end up with other mismatched files.

> other info, i don't find the new openssl (after 1.1.1w) in netlabs
> repository,
> maybe it's still on the "test environment"
>

No, 1.1.1w is the latest available.

[Massimo S.]

Il 28/01/2026 21:27, 'Lewis G Rosenthal' via Apache for OS/2 ha scritto:
> On 01/28/26 08:01 am, Massimo S. wrote:
>> Unfortunately no, apache don't start anymore, after upgrading openssl from 1.1.1l to 1.1.1w..
>>
>
> Interesting.
>
>> " non-recoverable error occurred.  The process ended."
>>
>> in populog.os2:
>>
>> 01-28-2026  13:46:07  SYS2070  PID 008e  TID 0001  Slot 003e
>> HTTPD.EXE
>> CRYPTO11->LIBCN0.2026
>> 182
>>
>> i've the latest LIBCN (verified with YUM)
>>
>> i've downgraded openssl from 1.1.1w to 1.1.1s which anyway is newer than 1.1.1l
>> and apache works/start again
>>
>
> Did you restart the server (the entire box) after upgrading openssl? This could have been something from
> 1.1.1s still in memory and the crypto11.dll from 1.1.1w not aligning (for obvious reasons).

yes, since i had a similar issue in the past

> Did you update openssl *and* openssl-libs? If you just use zips and not yum, you're liable to end up with
> other mismatched files.

YUM say that it's mandatory, infact it install 2 packages, openssl and openssl-libs (see attachment).

>> other info, i don't find the new openssl (after 1.1.1w) in netlabs repository,
>> maybe it's still on the "test environment"
>>
>
> No, 1.1.1w is the latest available.

I'm puzzled since Steven has published this on the ML in april 2025:

"
It seems to be working here with php 7 and httpd reports itself as

Apache/2.4.63 (OS/2) PHP/7.4.32 OpenSSL/3.4.1
"

massimo

[Lewis Rosenthal]

On January 28, 2026 3:39:25 PM EST, "Massimo S." <m...@ecomstation.it> wrote:
>Il 28/01/2026 21:27, 'Lewis G Rosenthal' via Apache for OS/2 ha scritto:
>> On 01/28/26 08:01 am, Massimo S. wrote:
>>> Unfortunately no, apache don't start anymore, after upgrading openssl from 1.1.1l to 1.1.1w..
>>>
>>
>> Interesting.
>>
>>> " non-recoverable error occurred.  The process ended."
>>>
>>> in populog.os2:
>>>
>>> 01-28-2026  13:46:07  SYS2070  PID 008e  TID 0001  Slot 003e
>>> HTTPD.EXE
>>> CRYPTO11->LIBCN0.2026
>>> 182
>>>
>>> i've the latest LIBCN (verified with YUM)
>>>
>>> i've downgraded openssl from 1.1.1w to 1.1.1s which anyway is newer than 1.1.1l
>>> and apache works/start again
>>>
>>
>> Did you restart the server (the entire box) after upgrading openssl? This could have been something from 1.1.1s still in memory and the crypto11.dll from 1.1.1w not aligning (for obvious reasons).
>
>yes, since i had a similar issue in the past
>
>> Did you update openssl *and* openssl-libs? If you just use zips and not yum, you're liable to end up with other mismatched files.
>
>YUM say that it's mandatory, infact it install 2 packages, openssl and openssl-libs (see attachment).
>
>>> other info, i don't find the new openssl (after 1.1.1w) in netlabs repository,
>>> maybe it's still on the "test environment"
>>>
>>
>> No, 1.1.1w is the latest available.
>
>I'm puzzled since Steven has published this on the ML in april 2025:
>
>"
>It seems to be working here with php 7 and httpd reports itself as
>
> Apache/2.4.63 (OS/2) PHP/7.4.32 OpenSSL/3.4.1
>"
>

Okay. Check the content of both rpms and search your disk for duplicate files (or use whichdll to see which one gets loaded). This just feels like an old file is getting loaded and causes the problem. Start with crypto11.dll.

>To unsubscribe from this group and stop receiving emails from it, send an email to apache2+u...@googlegroups.com.
>To view this discussion visit https://groups.google.com/d/msgid/apache2/190fde59-ae06-31bf-eaeb-42fc8aa5025f%40ecomstation.it.

--
Lewis

[Steven Levine]

In <56660ef1-dd8e-bf59...@ecomstation.it>, on 01/28/26

at 02:01 PM, "Massimo S." <m...@ecomstation.it> said:

Hi Massimo,

You really need to learn when to start a new thread. I almost skipped
your message because I know nothing is going to change for 2.4.63 until
Paul feels he wants to do some new builds.

>Unfortunately no, apache don't start anymore, after upgrading openssl
>from 1.1.1l to 1.1.1w..

As you found, you need to revert openssl to what was working, although for
reasons unrelated to your current issue. See:

https://github.com/bitwiseworks/openssl-os2/issues/6

This was discussed on

https://www.os2world.com/forum/index.php/topic,4043.0/topicseen.html

FWIW, you should make time to monitor the os2world forums. Folks post
where they post and you might miss information you need to know.

That said, this is not why you trapped, but if you get you DLLs in sync,
you will eventually trap.

>" non-recoverable error occurred. The process ended."

>in populog.os2:
>01-28-2026 13:46:07 SYS2070 PID 008e TID 0001 Slot 003e HTTPD.EXE
>CRYPTO11->LIBCN0.2026
>182
>i've the latest LIBCN (verified with YUM)

It should be obvious that you have the wrong libc package installed for
this openssl package.

lxlist -c:exemap tells us that the last two entry points in the libcn0.dll
installed here are

02026 ___libc_touch
02027 _LibLoadExceptq

The libc you are running would appear to be older because entry points are
only added, never deleted.

What version of libc did you have installed?

>other info, i don't find the new openssl (after 1.1.1w) in netlabs
>repository, maybe it's still on the "test environment"

It's the newest in netlabs-rel. Unless you know what your are doing, you
should avoid netlabs-exp. Yum tells us

openssl.pentium4 1:1.1.1w-1.oc00
installed

Available Packages
openssl.pentium4 1:1.1.1f-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1h-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1k-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1q-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1s-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1w-1.oc00
netlabs-rel
openssl.pentium4 1:1.1.1l-1.oc00
netlabs-rel
openssl.pentium4 1:3.4.1-2.oc00
netlabs-exp

[Steven Levine]

In <190fde59-ae06-31bf...@ecomstation.it>, on 01/28/26
at 09:39 PM, "Massimo S." <m...@ecomstation.it> said:

Hi,

>I'm puzzled since Steven has published this on the ML in april 2025:
>"
>It seems to be working here with php 7 and httpd reports itself as
> Apache/2.4.63 (OS/2) PHP/7.4.32 OpenSSL/3.4.1
>"

This is true. I happen to be running

libc.pentium4 1:0.1.12-1.oc00 installed

which is a bit old, but as I've shown has the needed entry points for
openssl 1.1.1w.

[Steven Levine]

In <03FF4B33-B6BB-45D1...@2rosenthals.com>, on 01/28/26
at 05:16 PM, "'Lewis Rosenthal' via Apache for OS/2"
<apa...@googlegroups.com> said:

Hi,

>Okay. Check the content of both rpms and search your disk for duplicate
>files (or use whichdll to see which one gets loaded).

FWIW, for DLLs like libc which are almost sure to be already loaded, I
tend to use

psfiles | find "LIBCN0"

Massimo definitely has mismatched DLLs. The entry point he is missing
does not exist in libc 1:0.1.11.

[Massimo S.]

Il 29/01/2026 01:57, Steven Levine ha scritto:
> In <56660ef1-dd8e-bf59...@ecomstation.it>, on 01/28/26
> at 02:01 PM, "Massimo S." <m...@ecomstation.it> said:
>
> Hi Massimo,
>
> You really need to learn when to start a new thread. I almost skipped
> your message because I know nothing is going to change for 2.4.63 until
> Paul feels he wants to do some new builds.
>
>> Unfortunately no, apache don't start anymore, after upgrading openssl
>>from 1.1.1l to 1.1.1w..
>
> As you found, you need to revert openssl to what was working, although for
> reasons unrelated to your current issue. See:
>
> https://github.com/bitwiseworks/openssl-os2/issues/6

i don't think this is my case, since it "exit" immediately at startup, probably
neither arrive to the point of receiving connections

> This was discussed on
>
> https://www.os2world.com/forum/index.php/topic,4043.0/topicseen.html
>
> FWIW, you should make time to monitor the os2world forums. Folks post
> where they post and you might miss information you need to know.

thanks

> That said, this is not why you trapped, but if you get you DLLs in sync,
> you will eventually trap.
>
>> " non-recoverable error occurred. The process ended."
>
>> in populog.os2:
>> 01-28-2026 13:46:07 SYS2070 PID 008e TID 0001 Slot 003e HTTPD.EXE
>> CRYPTO11->LIBCN0.2026
>> 182
>> i've the latest LIBCN (verified with YUM)
>
> It should be obvious that you have the wrong libc package installed for
> this openssl package.
>
> lxlist -c:exemap tells us that the last two entry points in the libcn0.dll
> installed here are
>
> 02026 ___libc_touch
> 02027 _LibLoadExceptq
>
> The libc you are running would appear to be older because entry points are
> only added, never deleted.

doh, i've seen this situation that maybe it's troublesome

yum info libc say:

Arch : i686
Versione : 0.1.9
Rilascio : 1.oc00

now i have:

Arch : pentium4
Versione : 0.1.14
Rilascio : 1.oc00


dunno if this matter but i found i also had:

libcx.pentium4 0:0.7.4-1.oc00

now i have:

libcx.pentium4 0:0.7.5-1.oc00


dunno if this matter too, i found that i also have
the very old libc05 3, 4 etc.. from the eCS 2.2b distro
should i also update them with YUM or they are not used anymore?

that's why i have not installed the newer libc since they are still on experimental repository we see that in
another thread

i don't know even how to do that with YUM

they also answered that they don't know when they will move the package
on the production repository..

massimo

[Steven Levine]

In <be9a2d64-719e-4b3a...@ecomstation.it>, on 01/29/26

at 09:38 AM, "Massimo S." <m...@ecomstation.it> said:

Hi,

>i don't think this is my case, since it "exit" immediately at startup,
>probably neither arrive to the point of receiving connections

As I stated, this is not your case. It is a reason for not using the
1.1.1w release.

>doh, i've seen this situation that maybe it's troublesome

No maybes about it. :-) 0.1.9 regardless of the architecture will be
missing the requred entry points.

>libcx.pentium4 0:0.7.4-1.oc00
>now i have:
>libcx.pentium4 0:0.7.5-1.oc00

>dunno if this matter too,

It may, but not for the issue we are discussing.

>i found that i also have
>the very old libc05 3, 4 etc.. from the eCS 2.2b distro
>should i also update them with YUM or they are not used anymore?

Only you can answer this question because only you know every application
you are using.

>that's why i have not installed the newer libc since they are still on
>experimental repository we see that in another thread

Of the package we are discussing only openssl 3.4.1 is still in
netlabs-exp. Unless I am misreading something, the rest are in
netlabs-rel. Perhaps your listing are a couple of days old. Some
packages moved recently.

>i don't know even how to do that with YUM

It's easy if you refer to the help screens:

yum list --showduplicates ...

[Massimo S.]

Hi all,

upgrading openssl from 1.1.1l to 1.1.1s have improved instability of apache.
I don't see any error in the apache error log, no entries in popuplog.os2, no eQ dumps..

Just apache exiting, it don't restart and after 2 or 3 retries the fault-daemon give setboot /b.

This also on a VM with only apache+ssl and no php websites (only html/js), that before was rock-solid stable.

massimo

[Massimo S.]

Hi all,

on the web server VM where apache ssl + php is running i'm seeing a number of errors like these after open ssl
upgrade:

02-06-2026 05:55:55 SYS2070 PID 0860 TID 0007 Slot 00a3
X:\APACHE\BIN\HTTPD.EXE
ICUUC->STDCPP6.__ZNSt18condition_variableC1Ev
127

Any idea?
Any help?

libc env and exceptQ are up to date

massimo