🆕 added Apache 2.4.63 configuration files and updated release info

[N6REJ]

PR Type

Enhancement

---

Description

• Added configuration files for Apache 2.4.63, including main and SSL configurations.

• Updated release information and properties for version 2.4.63.

• Introduced new module properties for mod_fcgid.

• Adjusted build and release properties to reflect the new version.

---

Changes walkthrough 📝

Relevant files

Configuration changes

bearsampp.conf Added Apache 2.4.63 base configuration file                            bin/apache2.4.63/bearsampp.conf Added configuration for Apache version 2.4.63. Defined paths for executables and ports. Included a placeholder for release version. +8/-0      httpd-ssl.conf Added SSL configuration for Apache 2.4.63                                bin/apache2.4.63/conf/extra/httpd-ssl.conf Added SSL configuration for Apache 2.4.63. Configured virtual host for HTTPS on port 443. Included directives for certificates and SSL options. +236/-0  httpd-ssl.conf.ber Added backup SSL configuration for Apache 2.4.63                  bin/apache2.4.63/conf/extra/httpd-ssl.conf.ber Added backup SSL configuration file for Apache 2.4.63. Mirrors the main SSL configuration with identical directives. +236/-0  httpd.conf Added main configuration for Apache 2.4.63                              bin/apache2.4.63/conf/httpd.conf Added main configuration file for Apache 2.4.63. Defined server root, modules, and virtual hosts. Configured logging and directory permissions. +569/-0  httpd.conf.ber Added backup main configuration for Apache 2.4.63                bin/apache2.4.63/conf/httpd.conf.ber Added backup main configuration file for Apache 2.4.63. Mirrors the main configuration with identical directives. +570/-0  modules.properties Added module properties for mod_fcgid                                        bin/apache2.4.63/modules.properties Added module properties for mod_fcgid. Linked to the mod_fcgid release for Apache 2.4.63. +1/-0      build.properties Updated build properties for Apache 2.4.63                              build.properties Updated bundle release date to 2025.2.9. Adjusted build properties for the new release. +1/-1      releases.properties Updated release properties for Apache 2.4.63                          releases.properties Added release information for Apache 2.4.63. Linked to the release package for version 2.4.63. +1/-0

---

Need help?

Type /help how to ... in the comments thread for any questions about Qodo Merge usage.

Check out the documentation for more information.

[qodo-code-review]

PR Reviewer Guide 🔍

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 3 🔵🔵🔵⚪⚪

🧪 No relevant tests

🔒 Security concerns Directory access control: The root directory configuration () allows access to the entire filesystem with 'Require all granted'. This could potentially expose sensitive files if not properly restricted to only the necessary web directories. The configuration should be reviewed and tightened to follow the principle of least privilege.

⚡ Recommended focus areas for review Security Configuration The default configuration allows access to the entire filesystem with 'Require all granted' in the root directory block. This should be restricted to only necessary directories. AllowOverride none Require all granted </Directory> SSL Configuration The SSL cipher suite configuration includes deprecated SSL protocols (SSLv2, SSLv3) and weak ciphers (EXP, eNULL) which should be removed for better security. SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:!SSLv2:!SSLv3:+EXP:+eNULL

[qodo-code-review]

PR Code Suggestions ✨

Explore these optional code suggestions:

Category	Suggestion	Impact
Security	Strengthen SSL cipher configuration The current cipher suite configuration includes weak and deprecated ciphers. Remove insecure ciphers and explicitly specify strong ciphers to enhance security. bin/apache2.4.63/conf/extra/httpd-ssl.conf [82] -SSLCipherSuite ALL:!ADH:!EXPORT56:+HIGH:+MEDIUM:+LOW:!SSLv2:!SSLv3:+EXP:+eNULL +SSLCipherSuite ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256 Apply this suggestion Suggestion importance[1-10]: 9 __ Why: The suggestion significantly improves security by removing weak ciphers and explicitly configuring only strong, modern cipher suites that provide forward secrecy and strong encryption.	High
	Add security response headers Add security headers to protect against common web vulnerabilities. These headers help prevent XSS, clickjacking, and other attacks. bin/apache2.4.63/conf/httpd.conf [256-286] <Directory "${BEARSAMPP_LIN_PATH}/www"> Options Indexes FollowSymLinks AllowOverride All # START switchOnline tag - Do not replace! Require local # END switchOnline tag - Do not replace! + Header always set X-Frame-Options "SAMEORIGIN" + Header always set X-XSS-Protection "1; mode=block" + Header always set X-Content-Type-Options "nosniff" </Directory> Apply this suggestion Suggestion importance[1-10]: 8 __ Why: Adding security headers is a critical improvement that helps protect against common web vulnerabilities like XSS and clickjacking. These headers are essential for web application security.	Medium
Possible issue	Fix private key file extension The private key file extension should be .key instead of .pub to follow standard conventions and avoid confusion. bin/apache2.4.63/conf/extra/httpd-ssl.conf [104] -SSLCertificateKeyFile "${BEARSAMPP_LIN_PATH}/ssl/localhost.pub" +SSLCertificateKeyFile "${BEARSAMPP_LIN_PATH}/ssl/localhost.key" Apply this suggestion Suggestion importance[1-10]: 8 __ Why: Using .pub extension for a private key file is incorrect and could lead to security issues. The .key extension is the standard convention for private key files.	Medium
General	Enable HTTP/2 Server Push Enable HTTP/2 Server Push for improved performance by adding the H2Push directive. bin/apache2.4.63/conf/httpd.conf [548-551] <IfModule http2_module> ProtocolsHonorOrder On Protocols h2 h2c http/1.1 + H2Push on + H2PushPriority * after </IfModule> Apply this suggestion Suggestion importance[1-10]: 5 __ Why: HTTP/2 Server Push can improve performance by allowing the server to proactively send resources to the client, though the actual performance gain depends on the specific use case and implementation.	Low