Hacker News Reader

Comment by Karunamon | Hacker News Reader

Old kernel perhaps, but that's still what's being shipped with the latest CentOS6 (and by extension, RHEL 6 as well). Old as it might be, it's in very wide use.

This would be a tremendous boon for those environments!

View on HN

But people who use ancient RHEL/CentOS don't apply random kernel patches and I doubt Red Hat will upstream it either.

RHEL6/CentOS 6 are the most recent releases; not exactly what I'd call ancient.

They are the second to most recent releases - RHEL7 was released in June, CentOS 7 in July.

RHEL 7/CentOS 7 are the most recent releases. 6 was released 3 years ago.

MANY production environments are still on RHEL 5.

Apache and openssl in rhel5 are too old to use IMO. People should upgrade.

Yes i totally agree .. nginx has very less memory footprint as well

Redhat applies critical security fixes for RHEL5 until 2020[1], and that's why people pay the money.

Yeah, it's old, outdated etc, but sometimes if something works it makes sense to stay on it.

[1] https://access.redhat.com/support/policy/updates/errata#Life...

The openssl 0.9.8 with Apache/2.2.3 combo only supports TLS 1.0. I couldn't setup TLS to get better than grade "B" on Qualys' SSL Server Test. I sacrificed MSIE on WinXP, used TLS 1.0 only, TLS_RSA_WITH_AES_128_CBC_SHA, TLS_DHE_RSA_WITH_AES_128_CBC_SHA, TLS_RSA_WITH_AES_256_CBC_SHA, TLS_DHE_RSA_WITH_AES_256_CBC_SHA only, got a "B". I want Forward Secrecy only, AEAD only setup. Have to upgrade to RHEL6 for that.

Reply on news.ycombinator.com