spdy on cpanel with apache 2.4.*

Does anyone have any advice for using SPDY with CPanel on an Apache 2.4.*?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dave BaldwinFixer of ProblemsCommented:
We might if we knew what the problem was.
badwolfffAuthor Commented:
Ah sorry... How to install it
Dave BaldwinFixer of ProblemsCommented:
Here's some info: https://developers.google.com/speed/spdy/mod_spdy/  Note that there are comments that Google Chrome will only support the most recent version.  I'm not sure why but I have a SPDY failure at least once a day with Chrome connecting to Facebook.
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

badwolfffAuthor Commented:
actually I had found it myself on google before I opened this thread. The thing I don't understand is, is it compatible with Apache 2.4.6 and above?
Dave BaldwinFixer of ProblemsCommented:
Here's the news you didn't want... https://mwent.info/blog/apache-2-4-spdy-3-1/   If Google is fazing out SPDY in favor of HTTP/2, you might not want to spend much time trying to install it.
badwolfffAuthor Commented:
Would you or someone else to  be so kind as to convert the following code into Centos 7 compatible? It js a workaround I found from a link on the site you mentioned but it is for Ubuntu


$ cd /tmp
$ sudo apt-get -y install git g++ libapr1-dev libaprutil1-dev curl patch binutils make devscripts
$ git clone https://github.com/eousphoros/mod-spdy.git
$ cd mod-spdy/src
$ ./build_modssl_with_npn.sh
$ chmod +x ./build/gyp_chromium
$ make BUILDTYPE=Release
$ service apache2 stop
$ cd /usr/lib/apache2/modules
$ mv mod_ssl.so mod_ssl.so.bak
$ cd /tmp/mod-spdy/src
$ sudo cp mod_ssl.so /usr/lib/apache2/modules
$ service apache2 start
$ sudo a2enmod ssl
$ service apache2 restart
$ sudo cp out/Release/libmod_spdy.so /usr/lib/apache2/modules/mod_spdy.so
$ echo "LoadModule spdy_module /usr/lib/apache2/modules/mod_spdy.so" | sudo tee /etc/apache2/mods-available/spdy.load
$ echo "SpdyEnabled on" | sudo tee /etc/apache2/mods-available/spdy.conf
$ sudo a2enmod spdy
$ service apache2 restart

Dave BaldwinFixer of ProblemsCommented:
There is a link to a CentOS rpm in the first link I gave you.
badwolfffAuthor Commented:

the first link you gave me is for Centos RPM but it does not say it if will work for Apache 2.4+
I have apache 2.4.16  and there it says

System Requirements

    Apache 2.2 (≥2.2.4)
    mod_ssl enabled
I asked you earlier if this also meant 2.4+ or this is an old tutorial from when the old Apache was around and not modified since.

The second link you gave me is what I am trying to follow in the meantime: https://mwent.info/blog/apache-2-4-spdy-3-1/. I'm just doing a dry run, convertnig the apt-get commands to yum and seeing if it works (should I not try this for some reason? - remember I use cPanel). On of the first steps on page 2 of the article asks to check the openssl version, which in my case is:
OpenSSL 1.0.1e-fips

Now the problem number 1 is I can't find the tarball for this specific version anywhere. Do you know where I might find it?

Number 2: More worrying still is that I constantly find articles on the internet that say that this version still has the heartbleed vulnerability. I am worried becuase I have auto-updates on in cPanel and this is the latest version they have bundled and if indeed it is insecure then there is a serious problem out there.

Number 3: Should I use the google tutorial in your first link even on apache 2.4.16 or should I go with the second link converting the commands to centos and finding a tarball for this openssl version?

Number 4. Should I try to update the openssl version on my cpanel by force? Will it/could it cause any problems?

Dave BaldwinFixer of ProblemsCommented:
I personally think that you should wait at least 6 months or a year and try this again then when things have settled down.  One of the articles I read said that Apache does not officially support SPDY at this time.

Do you already have an SSL/TLS certificate installed on your site?  SPDY and probably HTTP/2 only work over secure 'https' connections.
badwolfffAuthor Commented:
All my sites have ssl certificates. Google is giving SEO priority to this with above those without even with the same keywords.
Dave BaldwinFixer of ProblemsCommented:
You have exhausted my limited knowledge.  Click on "Request Attention" to get other to look at your question.
badwolfffAuthor Commented:
ok thanks
badwolfffAuthor Commented:
Is it true that Apache 2.4.17 is out with HTTP/2 - was this what you were talking about when you said it would be out in the near future?
Is this true?
Is this a stable version?
I have been trying to install SPDY on my Centos 7 server during the last week with lots of problems.
This would mean I could leave SPDY alone and go for HTTP/2

Please confirm and advise
Dave BaldwinFixer of ProblemsCommented:
That's one of the results.  Note that those versions on ApacheLounge are all for Windows.  See if there are any announcements on the CentOS site about it.  It would be much better if you can get a supported CentOS version with HTTP/2.
Dan CraciunIT ConsultantCommented:
Since this is a Cpanel install, I suggest you wait until the new version of Apache is pushed and you can install it from WHM.
It's the safest option, albeit not instant.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
badwolfffAuthor Commented:
Hallelujah! It is out for WHM!
Installation in progress :)
Dave BaldwinFixer of ProblemsCommented:
Good!  Let us know how it goes.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Apache Web Server

From novice to tech pro — start learning today.