Hi Joe (+SCL mailing list),
I have been using the apache 2.4.27 with the mod_ssl compiled with / supporting OpenSSL 1.0.2k provided by your repo (using the MPM Event). HTTP/2 works perfectly fine out of the box.
However, sending multiple requests (>3) to the server's CGI Scripts at the same time, quite often one of them keeps hanging and dies due to a timeout. I checked this and the scripts actually finish, but the server hangs. I increased the log verbosity in the apache, and I keep seeing following log pattern:
which ends up in:
and finally in the log I see:
I tried to search for the root cause of the issue and I found these:
Which leads me to asking, is this bug patched in the apache package available in your repo? If not, would it be too much to ask to have it patched?
Here's a link to the patch:
On Tue, 2017-10-17 at 16:34 +0100, Joe Orton wrote:
Hi Joni, On Fri, Oct 13, 2017 at 12:33:08PM +0000, Joni Herttuainen wrote: ...The apache of httpd24 provided by SCL is recent enough to support HTTP/2. But when I installed the package and configured it, I could not get the communication in h2 protocol to work. First of all, there was an error message when loading the mod_http2:You will typically get this error if you try to run the httpd executable from outside the SCL environment (i.e. not either under "scl enable httpd24" nor from the systemd unit). Otherwise you should not see this; LoadFile tricks to get the libary loaded are definitely not recommended, "scl enable" will adjust LD_LIBRARY_PATH so the library can be find.httpd: Syntax error on line 56 of /opt/rh/httpd24/root/etc/httpd/conf/httpd.conf: Syntax error on line 40 of /opt/rh/httpd24/root/etc/httpd/conf.modules.d/00-base.conf: Cannot load modules/mod_http2.so into server: libnghttp2- httpd24.so.14: cannot open shared object file: No such file or directoryHowever, this was not the cause for the http2 not to work. The actual cause was that the SSL module provided by SCL (httpd24-mod_ssl) seems to be built against OpenSSL version 1.0.1e which is older than the version required (1.0.2) to support ALPN (i.e. to have http/2 communication with the all the major browsers).Yes, unfortunately we can't support HTTP/2 with ALPN on the older OpenSSL. The updated httpd24 collection in testing for RHSCL 3.0 Beta has httpd 2.4.27 packages which do support ALPN if running on OpenSSL 1.0.2 (i.e. RHEL 7.4). We'd very much welcome testing feedback there if you're able to test that out. Note that recent versions of mod_http2 also require switching to the "event" MPM. Regards, Joe