If your new to Apache no problem as our OpenSSL 1.1.1 downloads are pre-configured to run Apache capable of handling TLS/1.3 connections.

For those upgrading and will be wanting to keep their current configuration files here's some things you need to know.

1. Apache will run without touching your config but will not connect in TLS/1.3.
2. At minimum you will have to add +TLSv1.3 to your SSLProtocol line because at this point, TLS/1.3 is technically experimental.
3. TLS/1.3 ciphers are not compatible with TLS/1.2 and below so we now have two (2) SSLCipherSuite lines to use;

Code: [Select]

    SSLCipherSuite SSL ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-CHACHA20-POLY1305:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-SHA256:DHE-RSA-AES256-SHA:!RC4:!LOW:!MD5:!aNULL:!eNULL:!3DES:!EXP:!PSK:!SRP:!DSS
    SSLCipherSuite TLSv1.3 TLS_CHACHA20_POLY1305_SHA256:TLS_AES_256_GCM_SHA384:TLS_AES_128_GCM_SHA256
4. #3 is still optional, if you just leave your SSLCipherSuite, Apache will use OpenSSL's defaults. This however might affect your current cipher order in TLS <= 1.0.2. I forget because I tested this back in August and think I remember this happening. I put chacha ciphers up front and I was seeing ECDHE-RSA-AES256-GCM-SHA384 in the browser.


Compatible Browsers:

Chrome 70
Firefox 63 (due out soon) and  Firefox Nightly.

Announcing the release of Apache 2.4.37

This version is a new feature version and that single new feature is the ability to speak TLS/1.3 (with OpenSSL 1.1.1 only).
More about the TLS/1.3 in a separate post. People upgrading from a prior OpenSSL version should read it when I've posted it.

This release includes:
APR Version:        1.6.5
APU Version:        1.6.1
Brotli Version:    1.0.6
Jansson Version:    2.11
Libcurl Version:   7.61.1
LibXML2 Version:    2.9.8
LUA Version:        5.1.5
NGHTTP2 Version:    1.34.0
OpenSSL Version:    1.0.2p, 1.1.0i, 1.1.1 or LibreSSL 2.8.2
PCRE Version:       8.42
SQLite3 Version:    3.25.2
ZLib Version:       1.2.10

You can get your copy of the new Apache HTTP Server from our download page.

Change Log for Apache 2.4.37

LibreSSL users;

With a new minor version comes new dll filenames. These are
crypto-44.dll, ssl-46.dll and tls-18.dll. Any of these files with a lower number are no longer needed.

http://php.net/supported-versions.php

Q. So what does that mean to our users?
A. For most nothing but for those of you using our VC11 builds, your going to have to upgrade to VC14 builds. Sorry but the only reason we build those is because PHP 5.6 is VC11 also and can be loaded as a module. That said you can run a vc11 module in vc14, you just need both redistibutables loaded. When it comes to PHP running as a module, the OpenSSL versions need to match as well.

There really hasn't been a reason to do vc11 builds for some time now, we just did them because php5.6 has been under php support. That ends when we all cheer in the new year.

Announcing the release of Apache 2.4.35

This version is a bug fix, stability and enhancement version. No new features, this was important to getting stability back.

This release includes:
APR Version:        1.6.5
APU Version:        1.6.1
Brotli Version:    1.0.6
Jansson Version:    2.11
Libcurl Version:   7.61.1
LibXML2 Version:    2.9.8
LUA Version:        5.1.5
NGHTTP2 Version:    1.33.0
OpenSSL Version:    1.0.2p, 1.1.0i or LibreSSL 2.7.4
PCRE Version:       8.42
SQLite3 Version:    3.25.1
ZLib Version:       1.2.10

You can get your copy of the new Apache HTTP Server from our download page.

Change Log for Apache 2.4.35

Announcing the release of Apache 2.4.34

This version is mainly a bug fix version.

This release includes:
APR Version:        1.6.3
APU Version:        1.6.1
Brotli Version:    1.0.5
Jansson Version:    2.11
Libcurl Version:   7.60.0
LibXML2 Version:    2.9.8
LUA Version:        5.1.5
NGHTTP2 Version:    1.32.0
OpenSSL Version:    1.0.2o, 1.1.0h or LibreSSL 2.7.4
PCRE Version:       8.42
SQLite3 Version:    3.24.0
ZLib Version:       1.2.10

You can get your copy of the new Apache HTTP Server from our download page.

Change Log for Apache 2.4.34

IIRC 1.3.9 was the first really good version.

I confess that I still miss the VC6, it ran on every windows computer without installing anything. Plug the USB stick or copy the files and one of my friends had a running apache on their computer for the next LAN party. Safer than open the windows share.

I remember showing you why I liked it so much that day during your first visit ... it's utter speed.

I know Montana was first to put something into effect at the beginning of the year but I think that was just data the ISPs collect. After the Facebook fiasco I'm sure it will be amended to include any entity that collects data. Most states are in the process of doing the same since our government doesn't seem willing.

Could this be the beginning of the end for this type of collecting, tabulating and selling data? One can only hope.

https://www.theregister.co.uk/2018/06/29/california_data_privacy_law/

In this article it mentions the way it came to be. It also mentions that it can be dismantled because it was not due to the peoples vote. That said, if they tamper with it to neuter it, it will end up on the ballot, it will be passed by the voters and all the legislators will most likely be voted out of office.

So to the many slimy politicians in Sacramento, just try and neuter it.

I can't say which version number it was for me. But I know it had only one digit after the three. Maybe 1.3.6 or 1.3.9.

IIRC 1.3.17 was the first one with an msi installer. One with the sources and one jsut the binaries. I wanted a portable version or at least a zip file. I was never able to open the msi files to extract the files. After some time I figured out how the change the path in the config that I was able to run it with from a USB strick any drive letter on any computer.
The msi was one of the reasons I found frist XAMPP which was too bloated and then Apache Lounge.

I confess that I still miss the VC6, it ran on every windows computer without installing anything. Plug the USB stick or copy the files and one of my friends had a running apache on their computer for the next LAN party. Safer than open the windows share.

It was 20 years ago today that I picked up my first copy of Apache for Windows. Apache 1.3.0 was the first version to run on Windows and was released on June 6, 1998.

The next version can be found here https://www.apachelounge.com/viewtopic.php?p=36843#36843