AIX Open Source

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Thanks, thats explained me a lot.

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

We are in the same situation.  Our Security team is informing us we need to use a version of Apache that uses OpenSSL3 to pass security vulnerability tests that are failing.  We are on AIX 7.1, OpenSSL 3.0.10.1001, and AIX toolbox versions of httpd 2.5.62-1 and mod_ssl 2.4.62-1.  Mod_ssl  appears to be built using OpenSSL 1.1.1.x.  When will a newer release of mod_ssl be available on the AIX Toolbox site which uses OpenSSL 3?   Or - what is a workaround solution available for mod_ssl to use the newer OpenSSL libraries? Thank you

Thanks, thats explained me a lot.

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

still uses old 1.1 libs...

edit: still old httpd version in repo, therefore old ssl libs loaded..

root@nimvie: /root # ldd /opt/freeware/lib/httpd/modules/mod_ssl.so/opt/freeware/lib/httpd/modules/mod_ssl.so needs:         /usr/lib/libssl.a(libssl.so.1.1)         /usr/lib/libcrypto.a(libcrypto.so.1.1)         /usr/lib/libc.a(shr.o)         /opt/freeware/lib/libgcc_s.a(shr.o)         /usr/lib/librtl.a(shr.o)         /usr/lib/libpthreads.a(shr_xpg5.o)         /usr/lib/libc.a(_shr.o)         /unix         /usr/lib/libcrypt.a(shr.o)         /usr/lib/libpthreads.a(_shr_xpg5.o)         /usr/lib/libpthreads.a(shr_comm.o)root@nimvie: /root #root@nimvie: /root # rpm -qi httpdName        : httpdVersion     : 2.4.62Release     : 1Architecture: ppcInstall Date: Thu Feb 20 10:24:00 CET 2025Group       : System Environment/DaemonsSize        : 12965003License     : Apache Software LicenseSignature   : (none)Source RPM  : httpd-2.4.62-1.src.rpmBuild Date  : Wed Jul 24 07:50:15 CEST 2024Build Host  : pokndd5.pok.stglabs.ibm.comRelocations : /opt /var /etcPackager    : IBM AIX Toolbox  <https://ibm.biz/AIXToolbox>URL         : https://httpd.apache.org/Bug URL     : https://ibm.biz/aixoss_forumSummary     : Apache HTTP ServerDescription :The Apache HTTP Server is a powerful, efficient, and extensibleweb server.

------------------------------
I regret starting this entire conversation

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

Please run "dnf clean all" and then update httpd to 2.4.62-2. The release 2 is built with openssl3.

still uses old 1.1 libs...

edit: still old httpd version in repo, therefore old ssl libs loaded..

root@nimvie: /root # ldd /opt/freeware/lib/httpd/modules/mod_ssl.so/opt/freeware/lib/httpd/modules/mod_ssl.so needs:         /usr/lib/libssl.a(libssl.so.1.1)         /usr/lib/libcrypto.a(libcrypto.so.1.1)         /usr/lib/libc.a(shr.o)         /opt/freeware/lib/libgcc_s.a(shr.o)         /usr/lib/librtl.a(shr.o)         /usr/lib/libpthreads.a(shr_xpg5.o)         /usr/lib/libc.a(_shr.o)         /unix         /usr/lib/libcrypt.a(shr.o)         /usr/lib/libpthreads.a(_shr_xpg5.o)         /usr/lib/libpthreads.a(shr_comm.o)root@nimvie: /root #root@nimvie: /root # rpm -qi httpdName        : httpdVersion     : 2.4.62Release     : 1Architecture: ppcInstall Date: Thu Feb 20 10:24:00 CET 2025Group       : System Environment/DaemonsSize        : 12965003License     : Apache Software LicenseSignature   : (none)Source RPM  : httpd-2.4.62-1.src.rpmBuild Date  : Wed Jul 24 07:50:15 CEST 2024Build Host  : pokndd5.pok.stglabs.ibm.comRelocations : /opt /var /etcPackager    : IBM AIX Toolbox  <https://ibm.biz/AIXToolbox>URL         : https://httpd.apache.org/Bug URL     : https://ibm.biz/aixoss_forumSummary     : Apache HTTP ServerDescription :The Apache HTTP Server is a powerful, efficient, and extensibleweb server.

------------------------------
I regret starting this entire conversation

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

newest httpd has some weird problems with ssl certs..still works with 2.4.62-1. why is this?

[Mon Feb 24 08:14:34.717484 2025] [ssl:info] [pid 43450708] AH01914: Configuring server nimvie.sozvers.at:443 for SSL protocol[Mon Feb 24 08:14:34.718436 2025] [ssl:emerg] [pid 43450708] AH01903: Failed to configure CA certificate chain!

Please run "dnf clean all" and then update httpd to 2.4.62-2. The release 2 is built with openssl3.

still uses old 1.1 libs...

edit: still old httpd version in repo, therefore old ssl libs loaded..

root@nimvie: /root # ldd /opt/freeware/lib/httpd/modules/mod_ssl.so/opt/freeware/lib/httpd/modules/mod_ssl.so needs:         /usr/lib/libssl.a(libssl.so.1.1)         /usr/lib/libcrypto.a(libcrypto.so.1.1)         /usr/lib/libc.a(shr.o)         /opt/freeware/lib/libgcc_s.a(shr.o)         /usr/lib/librtl.a(shr.o)         /usr/lib/libpthreads.a(shr_xpg5.o)         /usr/lib/libc.a(_shr.o)         /unix         /usr/lib/libcrypt.a(shr.o)         /usr/lib/libpthreads.a(_shr_xpg5.o)         /usr/lib/libpthreads.a(shr_comm.o)root@nimvie: /root #root@nimvie: /root # rpm -qi httpdName        : httpdVersion     : 2.4.62Release     : 1Architecture: ppcInstall Date: Thu Feb 20 10:24:00 CET 2025Group       : System Environment/DaemonsSize        : 12965003License     : Apache Software LicenseSignature   : (none)Source RPM  : httpd-2.4.62-1.src.rpmBuild Date  : Wed Jul 24 07:50:15 CEST 2024Build Host  : pokndd5.pok.stglabs.ibm.comRelocations : /opt /var /etcPackager    : IBM AIX Toolbox  <https://ibm.biz/AIXToolbox>URL         : https://httpd.apache.org/Bug URL     : https://ibm.biz/aixoss_forumSummary     : Apache HTTP ServerDescription :The Apache HTTP Server is a powerful, efficient, and extensibleweb server.

------------------------------
I regret starting this entire conversation

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

The information provided above is not enough to figure out the issue. It would be helpful if you can provide more details.
Could you please change the "LogLevel" field in httpd.conf file to "trace8" (LogLevel trace8), restart the server and share the resulting logs?

newest httpd has some weird problems with ssl certs..still works with 2.4.62-1. why is this?

[Mon Feb 24 08:14:34.717484 2025] [ssl:info] [pid 43450708] AH01914: Configuring server nimvie.sozvers.at:443 for SSL protocol[Mon Feb 24 08:14:34.718436 2025] [ssl:emerg] [pid 43450708] AH01903: Failed to configure CA certificate chain!

Please run "dnf clean all" and then update httpd to 2.4.62-2. The release 2 is built with openssl3.

still uses old 1.1 libs...

edit: still old httpd version in repo, therefore old ssl libs loaded..

root@nimvie: /root # ldd /opt/freeware/lib/httpd/modules/mod_ssl.so/opt/freeware/lib/httpd/modules/mod_ssl.so needs:         /usr/lib/libssl.a(libssl.so.1.1)         /usr/lib/libcrypto.a(libcrypto.so.1.1)         /usr/lib/libc.a(shr.o)         /opt/freeware/lib/libgcc_s.a(shr.o)         /usr/lib/librtl.a(shr.o)         /usr/lib/libpthreads.a(shr_xpg5.o)         /usr/lib/libc.a(_shr.o)         /unix         /usr/lib/libcrypt.a(shr.o)         /usr/lib/libpthreads.a(_shr_xpg5.o)         /usr/lib/libpthreads.a(shr_comm.o)root@nimvie: /root #root@nimvie: /root # rpm -qi httpdName        : httpdVersion     : 2.4.62Release     : 1Architecture: ppcInstall Date: Thu Feb 20 10:24:00 CET 2025Group       : System Environment/DaemonsSize        : 12965003License     : Apache Software LicenseSignature   : (none)Source RPM  : httpd-2.4.62-1.src.rpmBuild Date  : Wed Jul 24 07:50:15 CEST 2024Build Host  : pokndd5.pok.stglabs.ibm.comRelocations : /opt /var /etcPackager    : IBM AIX Toolbox  <https://ibm.biz/AIXToolbox>URL         : https://httpd.apache.org/Bug URL     : https://ibm.biz/aixoss_forumSummary     : Apache HTTP ServerDescription :The Apache HTTP Server is a powerful, efficient, and extensibleweb server.

------------------------------
I regret starting this entire conversation

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

The information provided above is not enough to figure out the issue. It would be helpful if you can provide more details.
Could you please change the "LogLevel" field in httpd.conf file to "trace8" (LogLevel trace8), restart the server and share the resulting logs?

newest httpd has some weird problems with ssl certs..still works with 2.4.62-1. why is this?

[Mon Feb 24 08:14:34.717484 2025] [ssl:info] [pid 43450708] AH01914: Configuring server nimvie.sozvers.at:443 for SSL protocol[Mon Feb 24 08:14:34.718436 2025] [ssl:emerg] [pid 43450708] AH01903: Failed to configure CA certificate chain!

Please run "dnf clean all" and then update httpd to 2.4.62-2. The release 2 is built with openssl3.

still uses old 1.1 libs...

edit: still old httpd version in repo, therefore old ssl libs loaded..

root@nimvie: /root # ldd /opt/freeware/lib/httpd/modules/mod_ssl.so/opt/freeware/lib/httpd/modules/mod_ssl.so needs:         /usr/lib/libssl.a(libssl.so.1.1)         /usr/lib/libcrypto.a(libcrypto.so.1.1)         /usr/lib/libc.a(shr.o)         /opt/freeware/lib/libgcc_s.a(shr.o)         /usr/lib/librtl.a(shr.o)         /usr/lib/libpthreads.a(shr_xpg5.o)         /usr/lib/libc.a(_shr.o)         /unix         /usr/lib/libcrypt.a(shr.o)         /usr/lib/libpthreads.a(_shr_xpg5.o)         /usr/lib/libpthreads.a(shr_comm.o)root@nimvie: /root #root@nimvie: /root # rpm -qi httpdName        : httpdVersion     : 2.4.62Release     : 1Architecture: ppcInstall Date: Thu Feb 20 10:24:00 CET 2025Group       : System Environment/DaemonsSize        : 12965003License     : Apache Software LicenseSignature   : (none)Source RPM  : httpd-2.4.62-1.src.rpmBuild Date  : Wed Jul 24 07:50:15 CEST 2024Build Host  : pokndd5.pok.stglabs.ibm.comRelocations : /opt /var /etcPackager    : IBM AIX Toolbox  <https://ibm.biz/AIXToolbox>URL         : https://httpd.apache.org/Bug URL     : https://ibm.biz/aixoss_forumSummary     : Apache HTTP ServerDescription :The Apache HTTP Server is a powerful, efficient, and extensibleweb server.

------------------------------
I regret starting this entire conversation

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

Ayappan, Are you aware of any ETA or roadmap date for this release?

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

Reshma,

Do you have any timeline on when a new Apache package can be available with Apache 2.4.63 and a version of OpenSSL >= 3.0.15?

We have number of vulnerabilities now being flagged on Apache Openssl versions < 3.0.15

------------------------------
Michael Larsen

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

Hi Michael,

We are working on making httpd 2.4.63 available in AIX Toolbox by next week. 
Regarding openssl, 3.0.15 is already available in AIX web download site. Please download and install it from there.
https://www.ibm.com/resources/mrs/assets/DownloadList?source=aixbp&lang=en_US

------------------------------
RESHMA KUMAR

Original Message:
Sent: Mon April 07, 2025 06:26 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Do you have any timeline on when a new Apache package can be available with Apache 2.4.63 and a version of OpenSSL >= 3.0.15?

We have number of vulnerabilities now being flagged on Apache Openssl versions < 3.0.15

------------------------------
Michael Larsen

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------

Reshma, 

Excellent, do you know what OpenSSL version you will be compiling for Apache 2.4.63?

Hi Michael,

We are working on making httpd 2.4.63 available in AIX Toolbox by next week. 
Regarding openssl, 3.0.15 is already available in AIX web download site. Please download and install it from there.
https://www.ibm.com/resources/mrs/assets/DownloadList?source=aixbp&lang=en_US

------------------------------
RESHMA KUMAR

Original Message:
Sent: Mon April 07, 2025 06:26 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Do you have any timeline on when a new Apache package can be available with Apache 2.4.63 and a version of OpenSSL >= 3.0.15?

We have number of vulnerabilities now being flagged on Apache Openssl versions < 3.0.15

------------------------------
Michael Larsen

Original Message:
Sent: Thu February 20, 2025 12:25 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
We have published httpd 2.4.62-2 in AIX Toolbox. Release 2 is built with openssl3.
httpd-2.4.62-2.aix7.1.ppc.rpm
You can use dnf to update to this release.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Wed February 19, 2025 10:20 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Where are you going to publish the Apache/OpenSSL3 version? and how are you going to distinguish this new package with the original package that is linked to OpenSSL1.x?

------------------------------
Michael Larsen

Original Message:
Sent: Tue February 11, 2025 07:16 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

Hi Michael,
As you suggested, we will not be updating httpd to 2.4.63. We are working on httpd 2.4.62 with openssl3 and it will be published by the end of this week. 

------------------------------
RESHMA KUMAR

Original Message:
Sent: Fri February 07, 2025 12:43 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Reshma,

Just when we thought we had things all figured out, looks like the open source apache community has just released Apache 2.4.63 ( on Jan 23, 2025).   Are you still working on the OpenSSL3.x compile with 2.4.62 or does this new release cause issues.  My guess better to take one step at time and not introduce to many variables.  Please let us know what direction you are taking this, and any release time tables.   Thank you for all your help - Michael Larsen

------------------------------
Michael Larsen

Original Message:
Sent: Wed January 22, 2025 01:27 AM
From: RESHMA KUMAR
Subject: openssl3 and mod_ssl question

We are working on compiling apache with openssl3 and will try to provide it within couple of weeks.
We will keep the thread updated with the progress.

------------------------------
RESHMA KUMAR

Original Message:
Sent: Tue January 21, 2025 04:41 PM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Sorry for the typo:    OpenSSL 3.x is NOW available for AIX 7.1, 7.2 and 7.3.

Now we just need info on when a compiled version of Apache will be released with that OpenSSL3.X library, and any upgrade considerations for moving from OpenSSL1.X to OpenSSL3.X on that Apache release.

------------------------------
Michael Larsen

Original Message:
Sent: Mon December 30, 2024 10:32 PM
From: Ayappan P
Subject: openssl3 and mod_ssl question

Checked with AIX Openssl team recently. The work (Openssl 3 in AIX 7.1) is still in progress. I don't have any more details at this moment. 
Since Openssl is supported by IBM, you can open a case and get more details on this. 

------------------------------
Ayappan P

Original Message:
Sent: Mon December 30, 2024 11:52 AM
From: Michael Larsen
Subject: openssl3 and mod_ssl question

Ayappan, Are you aware of any ETA or roadmap date for this release?

------------------------------
Michael Larsen

Original Message:
Sent: Fri September 27, 2024 09:16 AM
From: Ayappan P
Subject: openssl3 and mod_ssl question

AIX Toolbox packages are built against openssl 1.1.1 (dynamic linking). So even with openssl 3.0 installed, the linkage is with the *.so.1.1 shared libraries as you can see from the ldd output. Toolbox ecosystem can move to openssl 3.0 only when openssl 3.0 is available in AIX 7.1, as 7.1 is the base build level for AIX Toolbox packages. As per AIX openssl team, openssl 3.0 will be available in AIX 7.1 this year end. 

------------------------------
Ayappan P

Original Message:
Sent: Fri September 27, 2024 05:08 AM
From: Tomasz Boruszek
Subject: openssl3 and mod_ssl question

------------------------------
Tomasz Boruszek
------------------------------