Package: apache2
Version: 2.4.25-3+deb9u5
Severity: important

Dear Maintainer,

   * What led up to the situation?
Updating to apache 2.4.25-3+deb9u5 amd64
   * What exactly did you do (or not do) that was effective (or
     ineffective)?
Downgrading to apache 2.4.25-3+deb9u4; see
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904156 which incorrectly
states the bug as a problem with openssl.
   * What was the outcome of this action?
Http2 works again.
   * What outcome did you expect instead?
No particular outcome expected.



-- Package-specific info:

-- System Information:
Debian Release: 9.5
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 4.9.0-6-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8),
LANGUAGE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages apache2 depends on:
ii  apache2-bin          2.4.25-3+deb9u5
ii  apache2-data         2.4.25-3+deb9u5
ii  apache2-utils        2.4.25-3+deb9u5
ii  dpkg                 1.18.25
ii  init-system-helpers  1.48
ii  lsb-base             9.20161125
ii  mime-support         3.60
ii  perl                 5.24.1-3+deb9u4
ii  procps               2:3.3.12-3+deb9u1

Versions of packages apache2 recommends:
ii  ssl-cert  1.0.39

Versions of packages apache2 suggests:
pn  apache2-doc                                      <none>
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
pn  www-browser                                      <none>

Versions of packages apache2-bin depends on:
ii  libapr1                  1.5.2-5
ii  libaprutil1              1.5.4-3
ii  libaprutil1-dbd-sqlite3  1.5.4-3
ii  libaprutil1-ldap         1.5.4-3
ii  libc6                    2.24-11+deb9u3
ii  libldap-2.4-2            2.4.44+dfsg-5+deb9u2
ii  liblua5.2-0              5.2.4-1.1+b2
ii  libnghttp2-14            1.18.1-1
ii  libpcre3                 2:8.39-3
ii  libssl1.0.2              1.0.2l-2+deb9u3
ii  libxml2                  2.9.4+dfsg1-2.2+deb9u2
ii  perl                     5.24.1-3+deb9u4
ii  zlib1g                   1:1.2.8.dfsg-5

Versions of packages apache2-bin suggests:
pn  apache2-doc                                      <none>
pn  apache2-suexec-pristine | apache2-suexec-custom  <none>
pn  www-browser                                      <none>

Versions of packages apache2 is related to:
ii  apache2      2.4.25-3+deb9u5
ii  apache2-bin  2.4.25-3+deb9u5

-- Configuration Files:
/etc/apache2/sites-available/000-default.conf changed:
<VirtualHost *:80>
        # The ServerName directive sets the request scheme, hostname and
port that
        # the server uses to identify itself. This is used when creating
        # redirection URLs. In the context of virtual hosts, the ServerName
        # specifies what hostname must appear in the request's Host: header
to
        # match this virtual host. For the default virtual host (this file)
this
        # value is not decisive as it is used as a last resort host
regardless.
        # However, you must set it for any further virtual host explicitly
        ServerName ServerWebAddress
        ServerAlias www.ServerWebAddress
        ServerAlias Hostname.ServerWebAddress
SetOutputFilter DEFLATE
DeflateCompressionLevel 9
HostnameLookups Off
<FilesMatch \.php$>
    SetHandler application/x-httpd-php
</FilesMatch>
<IfModule http2_module>
    LogLevel http2:info
</IfModule>
Protocols h2 h2c http/1.1
        ServerAdmin m.j.roto...@gmail.com
        DocumentRoot /var/www/html/ServerWebAddress
        ErrorLog ${APACHE_LOG_DIR}/error.log
        CustomLog ${APACHE_LOG_DIR}/access.log combined
        # Available loglevels: trace8, ..., trace1, debug, info, notice,
warn,
        # error, crit, alert, emerg.
        # It is also possible to configure the loglevel for particular
        # modules, e.g.
        #LogLevel info ssl:warn
<Directory /var/www/html/ServerWebAddress>
                Options Indexes FollowSymLinks MultiViews
                AllowOverride All
                Order allow,deny
                allow from all
</Directory>
        # For most configuration files from conf-available/, which are
        # enabled or disabled at a global level, it is possible to
        # include a line for only one particular virtual host. For example
the
        # following line enables the CGI configuration for this host only
        # after it has been globally disabled with "a2disconf".
        #Include conf-available/serve-cgi-bin.conf
RewriteEngine on
RewriteCond %{SERVER_NAME} =ServerWebAddress [OR]
RewriteCond %{SERVER_NAME} =Hostname.ServerWebAddress [OR]
RewriteCond %{SERVER_NAME} =www.ServerWebAddress
RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,NE,R=permanent]
</VirtualHost>


-- no debconf information

Reply via email to