{"id":11208,"date":"2023-02-16T17:43:53","date_gmt":"2023-02-16T08:43:53","guid":{"rendered":"https:\/\/www.stuffy.site\/computers\/?p=11208"},"modified":"2024-03-01T15:33:57","modified_gmt":"2024-03-01T06:33:57","slug":"rocky-linux8-apache-http2-openssl1-1-1t-tls1-3%e5%af%be%e5%bf%9c-codeit%e3%83%aa%e3%83%9d%e3%82%b8%e3%83%88%e3%83%aa%e3%81%ae%e5%b0%8e%e5%85%a5","status":"publish","type":"post","link":"https:\/\/www.stuffy.site\/computers\/archives\/11208","title":{"rendered":"Rocky Linux8 Apache HTTP2 OpenSSL1.1.1t TLS1.3\u5bfe\u5fdc CodeIT\u30ea\u30dd\u30b8\u30c8\u30ea\u306e\u5c0e\u5165"},"content":{"rendered":"\n

Rocky Linux 8\u306e Apache\u306b HTTP2\u30d7\u30ed\u30c8\u30b3\u30eb TLS1.3\u5bfe\u5fdc\u306e CodeIT\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u5c0e\u5165\u3057\u305f\u306e\u3067\u3081\u3082\u3002<\/p>\n\n\n\n\n\n\n\n

\u300c dnf \u300d\u30b3\u30de\u30f3\u30c9\u304b\u3089\u7c21\u5358\u306bHTTP2\u30d7\u30ed\u30c8\u30b3\u30eb\u5bfe\u5fdc\u306e\u300cApache HTTP\u30b5\u30fc\u30d0\u30fc\u300d\u3092\u69cb\u7bc9\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u308bCodeIT\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u5c0e\u5165\u3057\u3066\u307f\u307e\u3057\u305f\u3002<\/p>\n\n\n\n

\u307e\u305a\u300cRocky Linux 8\u300d\u300cAlma Linux 8\u300d\u7528\u306b\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u307e\u3059\u3002<\/p>\n\n\n

# cd \/etc\/yum.repos.d && wget https:\/\/repo.codeit.guru\/codeit.el8.repo<\/span><\/pre>\n\n\n
.<\/p>\n\n\n\n
\u3082\u3057\u304f\u306f CodeIT Technical Blog<\/a> \u304b\u3089\u5c02\u7528\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u300cCodeIT.repo\u300d\u3068\u3057\u3066\u30b3\u30d4\u30fc\u3057\u3066\u4fdd\u5b58\u3057\u307e\u3059\u3002<\/p>\n\n\n
vi \/etc\/yum.repos.d\/CodeIT.repo
<\/span>\n[CodeIT]\nname=CodeIT repo\nbaseurl=https:\/\/repo.codeit.guru\/packages\/centos\/$releasever\/$basearch\nenabled=1\ngpgkey=https:\/\/repo.codeit.guru\/RPM-GPG-KEY-MasterOfDevon\ngpgcheck=1\n
# \u73fe\u5728\u3001\u4ee5\u4e0b\u306e\u30ea\u30dd\u30b8\u30c8\u30ea\u306f\u30a8\u30e9\u30fc\u306b\u306a\u308b\u3088\u3046\u3067\u3057\u305f\n#[CodeIT-mainline]\n#name=CodeIT mainline repo
#baseurl=https:\/\/repo.codeit.guru\/packages\/mainline\/centos\/$releasever\/$basearch
#enabled=1
#gpgkey=https:\/\/repo.codeit.guru\/RPM-GPG-KEY-MasterOfDevon
#gpgcheck=1\n#\n#[CodeIT-testing]\n#name=CodeIT testing repo
#baseurl=https:\/\/repo.codeit.guru\/packages\/testing\/$releasever\/$basearch
#enabled=0
#gpgkey=https:\/\/repo.codeit.guru\/RPM-GPG-KEY-MasterOfDevon
#gpgcheck=1<\/pre>\n\n\n
.<\/p>\n\n\n\n
\u6b21\u306b\u901a\u5e38\u30ea\u30dd\u30b8\u30c8\u30ea\u306e httpd \u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u30ea\u30bb\u30c3\u30c8\u3057\u3066 httpd:codeit \u30e2\u30b8\u30e5\u30fc\u30eb\u3092\u6709\u52b9\u306b\u3057\u307e\u3059\u3002<\/p>\n\n\n
# dnf module reset httpd

# dnf module enable httpd:codeit
<\/span><\/pre>\n\n\n
.<\/p>\n\n\n\n
Apache\u3092\u505c\u6b62\u3057\u3066 \u300c dnf update \u300d\u3057\u3066Web\u30b5\u30fc\u30d0\u30fc\u3092\u66f4\u65b0\u3057\u307e\u3059\u3002<\/p>\n\n\n
# systemctl stop httpd

# dnf -y update
<\/span>\n\u30e1\u30bf\u30c7\u30fc\u30bf\u306e\u671f\u9650\u5207\u308c\u306e\u6700\u7d42\u78ba\u8a8d: 0:12:17 \u6642\u9593\u524d\u306e 2023\u5e7402\u670816\u65e5 14\u664257\u520641\u79d2 \u306b\u5b9f\u65bd\u3057\u307e\u3057\u305f\u3002\n\u4f9d\u5b58\u95a2\u4fc2\u304c\u89e3\u6c7a\u3057\u307e\u3057\u305f\u3002\n=============================================================================================================================================================================================================================================\n \u30d1\u30c3\u30b1\u30fc\u30b8                                                \u30a2\u30fc\u30ad\u30c6\u30af\u30c1\u30e3\u30fc                               \u30d0\u30fc\u30b8\u30e7\u30f3                                                                    \u30ea\u30dd\u30b8\u30c8\u30ea\u30fc                                   \u30b5\u30a4\u30ba\n=============================================================================================================================================================================================================================================\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9:\n httpd                                                     x86_64                                         2.4.55-1.module_codeit.codeit.el8                                             CodeIT                                         1.4 M\n httpd-filesystem                                          noarch                                         2.4.55-1.module_codeit.codeit.el8                                             CodeIT                                         8.0 k\n httpd-manual                                              noarch                                         2.4.55-1.module_codeit.codeit.el8                                             CodeIT                                         2.4 M\n httpd-tools                                               x86_64                                         2.4.55-1.module_codeit.codeit.el8                                             CodeIT                                          76 k\n mod_http2                                                 x86_64                                         2.0.12-1.module_codeit.codeit.el8                                             CodeIT                                         158 k\n mod_ssl                                                   x86_64                                         1:2.4.55-1.module_codeit.codeit.el8                                           CodeIT                                         106 k\n\u4f9d\u5b58\u95a2\u4fc2\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb:\n openssl-quic-libs                                         x86_64                                         1.1.1t-1.codeit.el8                                                           CodeIT                                         1.4 M\n\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u6982\u8981\n=============================================================================================================================================================================================================================================\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb    1 \u30d1\u30c3\u30b1\u30fc\u30b8\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9  6 \u30d1\u30c3\u30b1\u30fc\u30b8\n\n\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u30b5\u30a4\u30ba\u306e\u5408\u8a08: 5.6 M\n\u3053\u308c\u3067\u3088\u308d\u3057\u3044\u3067\u3059\u304b? [y\/N]: y\n\u30d1\u30c3\u30b1\u30fc\u30b8\u306e\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9:\n(1\/7): httpd-filesystem-2.4.55-1.module_codeit.codeit.el8.noarch.rpm                                                                                                                                          72 kB\/s | 8.0 kB     00:00\n(2\/7): httpd-2.4.55-1.module_codeit.codeit.el8.x86_64.rpm                                                                                                                                                    2.4 MB\/s | 1.4 MB     00:00\n(3\/7): httpd-manual-2.4.55-1.module_codeit.codeit.el8.noarch.rpm                                                                                                                                             3.7 MB\/s | 2.4 MB     00:00\n(4\/7): mod_http2-2.0.12-1.module_codeit.codeit.el8.x86_64.rpm                                                                                                                                                2.9 MB\/s | 158 kB     00:00\n(5\/7): openssl-quic-libs-1.1.1t-1.codeit.el8.x86_64.rpm                                                                                                                                                      1.4 MB\/s | 1.4 MB     00:01\n(6\/7): mod_ssl-2.4.55-1.module_codeit.codeit.el8.x86_64.rpm                                                                                                                                                  354 kB\/s | 106 kB     00:00\n(7\/7): httpd-tools-2.4.55-1.module_codeit.codeit.el8.x86_64.rpm                                                                                                                                              100 kB\/s |  76 kB     00:00\n---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------\n\u5408\u8a08                                                                                                                                                                                                         4.1 MB\/s | 5.6 MB     00:01\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u3092\u5b9f\u884c\u4e2d\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u78ba\u8a8d\u306b\u6210\u529f\u3057\u307e\u3057\u305f\u3002\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u30c6\u30b9\u30c8\u3092\u5b9f\u884c\u4e2d\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u306e\u30c6\u30b9\u30c8\u306b\u6210\u529f\u3057\u307e\u3057\u305f\u3002\n\u30c8\u30e9\u30f3\u30b6\u30af\u30b7\u30e7\u30f3\u3092\u5b9f\u884c\u4e2d\n  \u6e96\u5099             :                                                                                                                                                                                                                     1\/1\n  scriptlet\u306e\u5b9f\u884c\u4e2d: openssl-quic-libs-1.1.1t-1.codeit.el8.x86_64                                                                                                                                                                        1\/1\n  \u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4e2d   : openssl-quic-libs-1.1.1t-1.codeit.el8.x86_64                                                                                                                                                                       1\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: httpd-filesystem-2.4.55-1.module_codeit.codeit.el8.noarch                                                                                                                                                          2\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : httpd-filesystem-2.4.55-1.module_codeit.codeit.el8.noarch                                                                                                                                                          2\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : httpd-tools-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                               3\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : httpd-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                     4\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: httpd-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                     4\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : mod_http2-2.0.12-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                 5\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : httpd-manual-2.4.55-1.module_codeit.codeit.el8.noarch                                                                                                                                                              6\/13\n  \u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u4e2d : mod_ssl-1:2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                 7\/13\n\u8b66\u544a: \/etc\/httpd\/conf.d\/ssl.conf \u306f \/etc\/httpd\/conf.d\/ssl.conf.rpmnew \u3068\u3057\u3066\u4f5c\u6210\u3055\u308c\u307e\u3057\u305f\u3002\n\n  \u6574\u7406             : httpd-manual-2.4.37-51.module+el8.7.0+1059+126e9251.noarch                                                                                                                                                         8\/13\n  \u6574\u7406             : mod_ssl-1:2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                            9\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: httpd-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                               10\/13\n  \u6574\u7406             : httpd-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                               10\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: httpd-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                               10\/13\n  \u6574\u7406             : httpd-filesystem-2.4.37-51.module+el8.7.0+1059+126e9251.noarch                                                                                                                                                    11\/13\n  \u6574\u7406             : httpd-tools-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                         12\/13\n  \u6574\u7406             : mod_http2-1.15.7-5.module+el8.6.0+823+f143cee1.x86_64                                                                                                                                                             13\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: httpd-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                    13\/13\n  scriptlet\u306e\u5b9f\u884c\u4e2d: mod_http2-1.15.7-5.module+el8.6.0+823+f143cee1.x86_64                                                                                                                                                             13\/13\nFailed to copy files to \/run\/cockpit\/inactive.motd: No such file or directory\n\u8b66\u544a: %transfiletriggerin(systemd-239-68.el8_7.2.x86_64) \u30b9\u30af\u30ea\u30d7\u30c8\u306e\u5b9f\u884c\u306b\u5931\u6557\u3057\u307e\u3057\u305f\u3002\u7d42\u4e86\u30b9\u30c6\u30fc\u30bf\u30b9 73\n\nError in  scriptlet in rpm package mod_http2\n  \u691c\u8a3c             : openssl-quic-libs-1.1.1t-1.codeit.el8.x86_64                                                                                                                                                                       1\/13\n  \u691c\u8a3c             : httpd-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                     2\/13\n  \u691c\u8a3c             : httpd-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                                3\/13\n  \u691c\u8a3c             : httpd-filesystem-2.4.55-1.module_codeit.codeit.el8.noarch                                                                                                                                                          4\/13\n  \u691c\u8a3c             : httpd-filesystem-2.4.37-51.module+el8.7.0+1059+126e9251.noarch                                                                                                                                                     5\/13\n  \u691c\u8a3c             : httpd-manual-2.4.55-1.module_codeit.codeit.el8.noarch                                                                                                                                                              6\/13\n  \u691c\u8a3c             : httpd-manual-2.4.37-51.module+el8.7.0+1059+126e9251.noarch                                                                                                                                                         7\/13\n  \u691c\u8a3c             : httpd-tools-2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                               8\/13\n  \u691c\u8a3c             : httpd-tools-2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                          9\/13\n  \u691c\u8a3c             : mod_http2-2.0.12-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                10\/13\n  \u691c\u8a3c             : mod_http2-1.15.7-5.module+el8.6.0+823+f143cee1.x86_64                                                                                                                                                             11\/13\n  \u691c\u8a3c             : mod_ssl-1:2.4.55-1.module_codeit.codeit.el8.x86_64                                                                                                                                                                12\/13\n  \u691c\u8a3c             : mod_ssl-1:2.4.37-51.module+el8.7.0+1059+126e9251.x86_64                                                                                                                                                           13\/13\n\n\u30a2\u30c3\u30d7\u30b0\u30ec\u30fc\u30c9\u6e08\u307f:\n  httpd-2.4.55-1.module_codeit.codeit.el8.x86_64          httpd-filesystem-2.4.55-1.module_codeit.codeit.el8.noarch      httpd-manual-2.4.55-1.module_codeit.codeit.el8.noarch      httpd-tools-2.4.55-1.module_codeit.codeit.el8.x86_64\n  mod_http2-2.0.12-1.module_codeit.codeit.el8.x86_64      mod_ssl-1:2.4.55-1.module_codeit.codeit.el8.x86_64\n\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u6e08\u307f:\n  openssl-quic-libs-1.1.1t-1.codeit.el8.x86_64\n\n\u5b8c\u4e86\u3057\u307e\u3057\u305f!<\/pre>\n\n\n
SSL \u306e\u79d8\u5bc6\u9375\u3092\u4f5c\u6210\u30fb\u30fb\u30fb<\/p>\n\n\n
# cd \/etc\/pki\/tls\/private\/

# cp localhost.key{,.org}

# openssl rsa -in localhost.key.org -out localhost.key<\/span><\/pre>\n\n\n
ssl.conf \u3092\u7de8\u96c6\u3057\u307e\u3059\u3002<\/p>\n\n\n
# vi \/etc\/httpd\/conf.d\/ssl.conf<\/span>\n
\u2193\uff08\u8ffd\u8a18\uff09\nProtocols h2 http\/1.1<\/pre>\n\n\n
\/etc\/httpd\/conf\/httpd.conf \u306b\u4ee5\u4e0b\u306e\u30d5\u30a3\u30eb\u30bf\u30fc\u3092\u8ffd\u8a18\u3002<\/p>\n\n\n
# vi \/etc\/httpd\/conf\/httpd.conf<\/span>\n
\u2193\uff08\u6700\u4e0b\u884c\u306b\u8ffd\u8a18\n<IfModule mime_module>\n    AddOutputFilterByType BROTLI_COMPRESS text\/html text\/plain text\/xml text\/css text\/javascript application\/javascript
<\/IfModule>\n<\/pre>\n\n\n
Apache\u3092\u518d\u8d77\u52d5\u3057\u307e\u3059\u3002<\/p>\n\n\n
# systemctl restart httpd
<\/span>
# SELinux \u30a8\u30e9\u30fc\u304c\u51fa\u308b\u3068\u304d\u306f\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3067\u8a31\u53ef\u3057\u3066\u304f\u3060\u3055\u3044
# setsebool -P domain_can_mmap_files 1
<\/pre>\n\n\n
.<\/p>\n\n\n\n
\u4f55\u3082\u306a\u3051\u308c\u3070Firefox\u30a2\u30c9\u30aa\u30f3\u306e\u300cHTTP Version Indicator\u300d\u3067\u81ea\u30b5\u30a4\u30c8\u306e\u30a2\u30c9\u30ec\u30b9\u30d0\u30fc\u306b\u300c\u7a32\u59bb\u300d\u30de\u30fc\u30af\u304c\u8868\u793a\u3055\u308c\u307e\u3057\u305f\u3002<\/p>\n\n\n
\n
\"\"<\/a><\/figure>\n<\/div>\n\n\n
.<\/p>\n\n\n\n
<\/p>\n\n\n\n
\u53c2\u8003URL\uff1aCodeIT Technical Blog<\/a><\/p>\n\n\n\n
\"CodeIT<\/figure>\n\n\n\n
<\/a><\/p>\n\n\n\n
Apache httpd 2.4.54 with brotli support, TLS 1.3 final (RFC 8446) built against OpenSSL 1.1.1o with http2, mod_http2 2.0.2 and ALPN for Red Hat Enterprise Linux 7\/8 and CentOS 7, Alma Linux 8, Rocky Linux 8<\/a><\/h1>\n","protected":false},"excerpt":{"rendered":"
Rocky Linux 8\u306e Apache\u306b HTTP2\u30d7\u30ed\u30c8\u30b3\u30eb TLS1.3\u5bfe\u5fdc\u306e CodeIT\u30ea\u30dd\u30b8\u30c8\u30ea\u3092\u5c0e\u5165\u3057\u305f\u306e\u3067\u3081\u3082\u3002<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[94,93,91],"tags":[],"class_list":["post-11208","post","type-post","status-publish","format-standard","hentry","category-apache-rocky-linux","category-http2","category-rocky-linux"],"_links":{"self":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/11208","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/comments?post=11208"}],"version-history":[{"count":24,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/11208\/revisions"}],"predecessor-version":[{"id":11698,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/posts\/11208\/revisions\/11698"}],"wp:attachment":[{"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/media?parent=11208"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/categories?post=11208"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.stuffy.site\/computers\/wp-json\/wp\/v2\/tags?post=11208"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}