RE: IBM i Apache HTTP server

My question stems from the recent OpenSSL issue. When we were doing testing to see what we had to deal with Qualsys said we should enable TLS 1.2. Which we did and it increase our ranking from B to A-. To get to an A it recommends we enable Forward Secrecy so I was looking into doing that and discovered that Apache added support for that in 2.2.29. So it led me to compare the current version of Apache to what we are running. Google implement forward secrecy in 2011 for gmail.

-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx [mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Jon Paris
Sent: Monday, April 14, 2014 7:02 PM
To: Midrange Systems Technical Discussion
Subject: Re: IBM i Apache HTTP server

Don't know why you have the concern Mike but some time back we raised a similar question. In our case the "old" version was causing queries in our PCI compliance testing. We were assured by IBM at the time that all security fixes had been addressed in the IBM i version - they just hadn't rebuilt using the latest versions.


On 2014-04-14, at 6:58 PM, Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx> wrote:

V7R2 is reported to have a new version of Apache.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects


-----Original Message-----
From: midrange-l-bounces@xxxxxxxxxxxx
[mailto:midrange-l-bounces@xxxxxxxxxxxx] On Behalf Of Mike Cunningham
Sent: Monday, April 14, 2014 1:12 PM
To: Midrange Systems Technical Discussion
Subject: IBM i Apache HTTP server

We are running V7.1 at the most recent technology release level and
with patches only a few months old. Our Apache version reports that it
is 2.2.11 which according to this site
http://www.apachehaus.com/index.php?option=com_content&view=article&id
=119&I
temid=104 was released in 2008 and has had 19 newer releases and there
is a version 2.4.x that was first released in 2012 and is currently at
2.4.9 which was released just a month ago.

Does anyone know when IBM might be providing a newer version of their
implementation of Apache for IBM i platform?

Thanks

Mike Cunningham
VP of Information Technology Services/CIO Pennsylvania College of
Technology


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at http://archive.midrange.com/midrange-l.


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing
list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe,
unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take
a moment to review the archives at
http://archive.midrange.com/midrange-l.

Jon Paris

www.partner400.com
www.SystemiDeveloper.com




--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list To post a message email: MIDRANGE-L@xxxxxxxxxxxx To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/midrange-l
or email: MIDRANGE-L-request@xxxxxxxxxxxx Before posting, please take a moment to review the archives at http://archive.midrange.com/midrange-l.