The Apache Haus Forum

Forum Topics => News & General Discussion => Topic started by: Gregg on August 25, 2012, 01:09:12 AM

Title: Apache 2.2.23 Released
Post by: Gregg on August 25, 2012, 01:09:12 AM
The Apache Haus has released our distribution of the Apache HTTP Server Version 2.2.23. Built with APR 1.4.6, APR-Util 1.4.1, PCRE 8.31 and OpenSSL 1.0.1c IPv6 and SNI enabled.

Apache 2.2.23 is primarily a bug and security fix release. See the Change Log (http://svn.apache.org/viewvc/httpd/httpd/tags/2.2.23/CHANGES?revision=1375704&view=co) for full details.

Binaries are available on our Downloads Page (http://www.apachehaus.com/cgi-bin/download.plx).

Why no non-SNI versions? That is because OpenSSL 1.0.1 does not support the disabling SNI any longer.
I may be persuaded to build some non-SNI 0.9.8x downgrades if there is enough interest and since it doesn't support TLS/1.1 & 1.2 cyphers anyway. You trade encryption strength for security however not using the TLS/1.1 or 1.2 cyphers and using the RC4 cypher. Remember that the CBC cyphers for SSLv3 & TLS/1.0 are Beastable.