Index: /branches/rel_apv_10_7_4/tools/lighttpd/Makefile
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/Makefile	(revision 0)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/Makefile	(working copy)
@@ -0,0 +1,72 @@
+.PHONY: all openssl lighttpd
+
+all: lighttpd
+
+set_dns:
+	echo "nameserver 8.8.8.8" >> /etc/resolv.conf
+
+download_openssl:
+	mkdir -p openssl
+	cd openssl && curl -k -L -O https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz
+
+download_lighttpd:
+	curl -k -L -O https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.76.tar.xz
+
+openssl:
+	mkdir -p openssl
+	@if [ -d openssl/openssl-3.5.5 ]; then \
+		rm -rf openssl/openssl-3.5.5; \
+	fi
+	cd openssl && \
+	tar xf openssl-3.5.5.tar.gz && \
+	cd openssl-3.5.5 && \
+	./Configure linux-x86_64 enable-zlib enable-threads no-shared && \
+	make -j$$(nproc)
+
+lighttpd: openssl
+	@if [ -d build_lighttpd_rpm ]; then \
+		rm -rf build_lighttpd_rpm; \
+		mkdir build_lighttpd_rpm; \
+	fi
+	cd build_lighttpd_rpm && \
+	mkdir BUILD BUILDROOT RPMS SOURCES SPECS SRPMS
+
+	cp -f lighttpd-1.4.76.tar.xz build_lighttpd_rpm/SOURCES
+
+	cd lighttpd-1.4.76-4.el10_0 && \
+	rpm2cpio lighttpd-1.4.76-4.el10_0.src.rpm | cpio -idmv
+
+	cd lighttpd-1.4.76-4.el10_0 && \
+	cp -f \
+	favicon.ico \
+	index.html \
+	light_button.png \
+	light_logo.png \
+	lighttpd-1.4.75-defaultconf.patch \
+	lighttpd-configure-c99.patch \
+	lighttpd-empty.png \
+	lighttpd.logrotate \
+	lighttpd.service \
+	php.d-lighttpd.ini \
+	../build_lighttpd_rpm/SOURCES && \
+	cp -f lighttpd.spec ../build_lighttpd_rpm/SPECS
+
+	patch build_lighttpd_rpm/SPECS/lighttpd.spec < lighttpd-openssl3.patch
+
+	rpmbuild -ba build_lighttpd_rpm/SPECS/lighttpd.spec \
+	--define "_topdir $(CURDIR)/build_lighttpd_rpm" \
+	--without mbedtls \
+	--without pgsql \
+	--without nss \
+	--without maxminddb \
+	--without lua \
+	--without gnutls \
+	--without dbi \
+	--without mysql
+
+	@if [ ! -d lighttpd_rpm ]; then \
+		mkdir lighttpd_rpm; \
+	fi
+	cp -f build_lighttpd_rpm/RPMS/noarch/* lighttpd_rpm/
+	cp -f build_lighttpd_rpm/RPMS/x86_64/* lighttpd_rpm/
+	cp -f build_lighttpd_rpm/SRPMS/* lighttpd_rpm/
Index: /branches/rel_apv_10_7_4/tools/lighttpd/README.md
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/README.md	(revision 0)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/README.md	(working copy)
@@ -0,0 +1,28 @@
+# Build lighttpd RPM
+
+1. Compile OpenSSL 3 static library
+
+    1. Download
+        - [All version](https://openssl-library.org/source/)
+        - [3.5 [LTS]](https://github.com/openssl/openssl/releases/download/openssl-3.5.5/openssl-3.5.5.tar.gz)
+
+    2. Compile a static library
+    ```
+    make openssl
+    ```
+
+2. Compile and build a Lighttpd RPM
+
+    1. Download
+        - [All version](https://www.lighttpd.net/releases/)
+        - [1.4.76 page](https://www.lighttpd.net/2024/4/12/1.4.76/)
+        - [lighttpd-1.4.76.tar.xz](https://download.lighttpd.net/lighttpd/releases-1.4.x/lighttpd-1.4.76.tar.xz)
+
+    2. Compile and build rpm with openssl static library  
+    The important `*.spec` file was extracted from `lighttpd-1.4.76-4.el10_0.src.rpm` and modified.
+    ```
+    make lighttpd
+    ```
+
+3. Notes
+    - 2026/03/11: OpenSSL 3.5.5 and Lighttpd 1.4.76 can be built in the chroot build environment.
\ No newline at end of file
Index: /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76-4.el10_0/lighttpd-1.4.76-4.el10_0.src.rpm
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/x-rpm
Index: /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76-4.el10_0/lighttpd-1.4.76-4.el10_0.src.rpm
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76-4.el10_0/lighttpd-1.4.76-4.el10_0.src.rpm	(revision 40175)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76-4.el10_0/lighttpd-1.4.76-4.el10_0.src.rpm	(working copy)

Property changes on: tools/lighttpd/lighttpd-1.4.76-4.el10_0/lighttpd-1.4.76-4.el10_0.src.rpm
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/x-rpm
\ No newline at end of property
Index: /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76.tar.xz
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/x-xz
Index: /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76.tar.xz
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76.tar.xz	(revision 40175)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-1.4.76.tar.xz	(working copy)

Property changes on: tools/lighttpd/lighttpd-1.4.76.tar.xz
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/x-xz
\ No newline at end of property
Index: /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-openssl3.patch
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-openssl3.patch	(revision 0)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/lighttpd-openssl3.patch	(working copy)
@@ -0,0 +1,33 @@
+--- lighttpd.spec	2026-03-10 03:15:12.895801836 -0400
++++ lighttpd.spec.new	2026-03-10 03:23:50.863884685 -0400
+@@ -76,7 +76,7 @@
+ %{?with_lua:Requires(post): %{name}-mod_magnet}
+ %{?with_openssl:Requires(post): %{name}-mod_openssl}
+ Provides: webserver
+-BuildRequires: autoconf, automake, libtool, m4, pkg-config, /usr/bin/awk
++BuildRequires: autoconf, automake, libtool, m4, pkgconfig, /usr/bin/awk
+ %{?with_pcre:BuildRequires: pcre-devel}
+ %{?with_pcre2:BuildRequires: pcre2-devel}
+ %{?with_nettle:BuildRequires: nettle-devel}
+@@ -330,6 +330,9 @@
+ 
+ %build
+ autoreconf -if
++OPENSSL_DIR=%{_topdir}/../openssl/openssl-3.5.5
++export CPPFLAGS="-I$OPENSSL_DIR/include"
++export LDFLAGS="-L$OPENSSL_DIR -Wl,-Bstatic -lcrypto -lssl -Wl,-Bdynamic -ldl -lpthread -lz"
+ %configure \
+     --libdir='%{_libdir}/lighttpd' \
+     %{confswitch pcre} \
+@@ -346,7 +349,10 @@
+     %{confswitch gnutls} \
+     %{confswitch mbedtls} \
+     %{confswitch nss} \
+-    %{confswitch openssl} \
++    --with-openssl \
++    --enable-static=openssl \
++    --with-openssl-includes=$OPENSSL_DIR/include \
++    --with-openssl-libs=$OPENSSL_DIR \
+     %{?with_webdavprops:--with-webdav-props} \
+     %{?with_webdavlocks:--with-webdav-locks} \
+     %{?with_lua:--with-lua=lua} \
Index: /branches/rel_apv_10_7_4/tools/lighttpd/openssl/openssl-3.5.5.tar.gz
===================================================================
Cannot display: file marked as a binary type.
svn:mime-type = application/x-gzip
Index: /branches/rel_apv_10_7_4/tools/lighttpd/openssl/openssl-3.5.5.tar.gz
===================================================================
--- /branches/rel_apv_10_7_4/tools/lighttpd/openssl/openssl-3.5.5.tar.gz	(revision 40175)
+++ /branches/rel_apv_10_7_4/tools/lighttpd/openssl/openssl-3.5.5.tar.gz	(working copy)

Property changes on: tools/lighttpd/openssl/openssl-3.5.5.tar.gz
___________________________________________________________________
Added: svn:mime-type
## -0,0 +1 ##
+application/x-gzip
\ No newline at end of property
Index: /branches/rel_apv_10_7_4/tools/update/ustacksystem.ks
===================================================================
--- /branches/rel_apv_10_7_4/tools/update/ustacksystem.ks	(revision 40175)
+++ /branches/rel_apv_10_7_4/tools/update/ustacksystem.ks	(working copy)
@@ -58,7 +58,7 @@
 kmod-20-5.el7.x86_64
 sysstat-10.1.5-7.el7.x86_64
 libcurl-7.29.0-25.el7.centos.x86_64
-libuuid-2.23.2-26.el7.centos.3.1.x86_64
+libuuid-2.23.2-65.el7_9.1.x86_64
 irqbalance-1.0.7-5.el7.x86_64
 polkit-0.112-5.1.el7.centos.x86_64
 gdb-7.6.1-80.el7.x86_64
@@ -242,7 +242,7 @@
 hwdata-0.252-8.1.el7.x86_64
 libdrm-2.4.60-3.el7.x86_64
 pciutils-3.2.1-4.el7.x86_64
-lighttpd-fastcgi-1.4.54-1.el7.x86_64
+lighttpd-fastcgi-1.4.76-4.el7.centos.x86_64
 sendmail-8.14.7-4.el7.x86_64
 libgcc-4.8.5-4.el7.x86_64
 ntpdate-4.2.6p5-22.1.el7.centos.x86_64
@@ -345,12 +345,12 @@
 keyutils-libs-1.5.8-3.el7.x86_64
 ca-certificates-2015.2.4-71.el7.noarch
 python-libs-2.7.5-34.el7.x86_64
-libblkid-2.23.2-26.el7.centos.3.1.x86_64
+libblkid-2.23.2-65.el7_9.1.x86_64
 centos-logos-70.0.6-3.el7.centos.noarch
 net-snmp-libs-5.7.2-24.2.el7.centos.x86_64
 pam-1.1.8-22.el7.centos.x86_64
 systemd-libs-219-19.el7.x86_64
-libmount-2.23.2-26.el7.centos.3.1.x86_64
+libmount-2.23.2-65.el7_9.1.x86_64
 libselinux-python-2.2.2-6.el7.x86_64
 logrotate-3.8.6-6.el7.x86_64
 mariadb-libs-5.5.44-2.el7.centos.x86_64
@@ -370,7 +370,7 @@
 binutils-2.23.52.0.1-55.el7.x86_64
 rpm-libs-4.11.3-17.el7.x86_64
 openldap-2.4.40-8.el7.x86_64
-util-linux-2.23.2-26.el7.centos.3.2.x86_64
+util-linux-2.23.2-65.el7_9.1.x86_64
 dhcp-libs-4.2.5-42.el7.centos.x86_64
 kpartx-0.4.9-85.el7.x86_64
 device-mapper-libs-1.02.107-5.el7.x86_64
@@ -379,7 +379,7 @@
 systemd-sysv-219-19.el7.x86_64
 initscripts-9.49.30-1.el7.x86_64
 cronie-1.4.11-14.el7.x86_64
-lighttpd-1.4.54-1.el7.x86_64
+lighttpd-1.4.76-4.el7.centos.x86_64
 libpciaccess-0.13.4-3.el7.centos.x86_64
 plymouth-scripts-0.8.9-0.24.20140113.1.el7.centos.x86_64
 mesa-libgbm-10.6.5-3.20150824.el7.x86_64
Index: /branches/rel_apv_10_7_4/tools/ustackbuildenv.ks
===================================================================
--- /branches/rel_apv_10_7_4/tools/ustackbuildenv.ks	(revision 40175)
+++ /branches/rel_apv_10_7_4/tools/ustackbuildenv.ks	(working copy)
@@ -92,8 +92,6 @@
 sqlite-devel-3.7.17-8.el7.x86_64
 rrdtool-python-1.4.8-9.el7.x86_64
 python-flup-1.0.2-9.el7.noarch
-lighttpd-1.4.54-1.el7.x86_64
-lighttpd-fastcgi-1.4.54-1.el7.x86_64
 python-psutil-2.2.1-1.el7.x86_64
 perl-Net-Telnet-3.03-19.el7.noarch
 protobuf-2.5.0-8.el7.x86_64
@@ -116,6 +114,17 @@
 json-c-devel-0.11-4.el7_0.x86_64
 yasm-1.2.0-4.el7.x86_64
 
+# Build lighttpd RPM
+## openssl 3
+perl-IPC-Cmd-0.80-4.el7.noarch
+perl-Time-Piece-1.20.1-299.el7_9.x86_64
+## lighttpd
+pcre2-devel-10.23-2.el7.x86_64
+nettle-devel-2.7.1-9.el7_9.x86_64
+libuuid-devel-2.23.2-65.el7_9.1.x86_64
+libzstd-devel-1.5.5-1.el7.x86_64
+brotli-devel-1.1.0-1.el7.x86_64
+
 
 #below packages are dependence generated by yum
 libedit-3.0-12.20121213cvs.el7.x86_64
@@ -191,7 +200,7 @@
 dejavu-sans-mono-fonts-2.33-6.el7.noarch
 krb5-libs-1.13.2-10.el7.x86_64
 python-libs-2.7.5-34.el7.x86_64
-libblkid-2.23.2-26.el7.centos.3.1.x86_64
+libblkid-2.23.2-65.el7_9.1.x86_64
 libpwquality-1.2.3-4.el7.x86_64
 libselinux-python-2.2.2-6.el7.x86_64
 python-slip-0.4.0-2.el7.noarch
@@ -241,7 +250,7 @@
 nspr-4.10.8-2.el7_1.x86_64
 shadow-utils-4.1.5.1-18.el7.x86_64
 sed-4.2.2-5.el7.x86_64
-util-linux-2.23.2-26.el7.centos.3.1.x86_64
+util-linux-2.23.2-65.el7_9.1.x86_64
 gmp-6.0.0-11.el7.x86_64
 openssh-6.6.1p1-25.2.el7.centos.x86_64
 sqlite-3.7.17-8.el7.x86_64
@@ -336,7 +345,7 @@
 file-5.11-31.el7.x86_64
 gobject-introspection-1.42.0-1.el7.x86_64
 xz-devel-5.1.2-12alpha.el7.x86_64
-nettle-2.7.1-4.el7.x86_64
+nettle-2.7.1-9.el7_9.x86_64
 pinentry-0.8.1-14.el7.x86_64
 unzip-6.0-15.el7.x86_64
 bzip2-1.0.6-13.el7.x86_64
@@ -354,7 +363,7 @@
 pam-1.1.8-22.el7.centos.x86_64
 pam-devel-1.1.8-22.el7.centos.x86_64
 procps-ng-3.3.10-3.el7.x86_64
-libmount-2.23.2-26.el7.centos.3.1.x86_64
+libmount-2.23.2-65.el7_9.1.x86_64
 python-decorator-3.4.0-3.el7.noarch
 dbus-python-1.1.1-9.el7.x86_64
 net-snmp-libs-5.7.2-24.el7.x86_64
@@ -400,7 +409,7 @@
 libxml2-2.9.1-5.el7_1.2.x86_64
 libsemanage-2.1.10-18.el7.x86_64
 nss-util-3.19.1-4.el7_1.x86_64
-libuuid-2.23.2-26.el7.centos.3.1.x86_64
+libuuid-2.23.2-65.el7_9.1.x86_64
 libmnl-1.0.3-7.el7.x86_64
 libpng-1.5.13-5.el7.x86_64
 qrencode-libs-3.4.1-3.el7.x86_64
Index: /branches/rel_apv_10_7_4/usr/click/bin/http_filter_d/Makefile
===================================================================
--- /branches/rel_apv_10_7_4/usr/click/bin/http_filter_d/Makefile	(revision 40175)
+++ /branches/rel_apv_10_7_4/usr/click/bin/http_filter_d/Makefile	(working copy)
@@ -96,5 +96,6 @@
 .endif
 
 LDADD+= /usr/lib64/libexpat.so \
-	/usr/lib64/librrd.so 
+	/usr/lib64/librrd.so \
+	-luuid
 .endif
Index: /branches/rel_apv_10_7_4/usr/click/tools/build_config.py
===================================================================
--- /branches/rel_apv_10_7_4/usr/click/tools/build_config.py	(revision 40175)
+++ /branches/rel_apv_10_7_4/usr/click/tools/build_config.py	(working copy)
@@ -69,6 +69,60 @@
 if d['webui_source']:
     d['webui_source'] += prefix + deny_oprator +deny_suffix
 
+if 'webui_port' not in d:
+    d['webui_port'] = 8888
+
+ip_4_6 = 0
+d['webui_bind_4'] = '0.0.0.0'
+d['webui_bind_6'] = '::'
+if 'webui_bind' in d:
+    # Check whether an IP address is specified. If specified, determine whether it is IPv4 or IPv6.
+    if d['webui_bind'] == '':
+        pass
+    elif len(d['webui_bind'].split('.')) == 4:
+        d['webui_bind_4'] = d['webui_bind']
+        d['webui_bind_6'] = ''
+        ip_4_6 = 4
+    else:
+        d['webui_bind_4'] = ''
+        d['webui_bind_6'] = d['webui_bind']
+        ip_4_6 = 6
+
+webui_ip_port = ''
+if ip_4_6 == 0:
+    webui_ip_port = '''
+server.port = {port}
+server.tag = ""
+server.bind = "{bind4}"
+server.use-ipv6 = "enable"
+$SERVER["socket"] == "[{bind6}]:{port}" {{}}'''.format(
+        port=d['webui_port'],
+        bind4=d['webui_bind_4'],
+        bind6=d['webui_bind_6']
+    )
+elif ip_4_6 == 4:
+    webui_ip_port = '''
+server.port = {port}
+server.tag = ""
+server.bind = "{bind4}"
+server.use-ipv6 = "disable"'''.format(
+        port=d['webui_port'],
+        bind4=d['webui_bind_4'],
+        bind6=d['webui_bind_6']
+    )
+elif ip_4_6 == 6:
+    webui_ip_port = '''
+server.port = {port}
+server.tag = ""
+server.use-ipv6 = "enable"
+$SERVER["socket"] == "[{bind6}]:{port}" {{}}'''.format(
+        port=d['webui_port'],
+        bind4=d['webui_bind_4'],
+        bind6=d['webui_bind_6']
+    )
+
+d['webui_ip_port'] = webui_ip_port
+
 #read it
 src = string.Template(filein.read())
 filein.close()
Index: /branches/rel_apv_10_7_4/usr/click/webui/conf/lighttpd.conf
===================================================================
--- /branches/rel_apv_10_7_4/usr/click/webui/conf/lighttpd.conf	(revision 40175)
+++ /branches/rel_apv_10_7_4/usr/click/webui/conf/lighttpd.conf	(working copy)
@@ -1,8 +1,10 @@
-server.port = $webui_port
-server.tag = ""
-server.bind = "$webui_bind"
-server.use-ipv6 = "enable"
-server.set-v6only = "disable"
+# server.port = $webui_port
+# server.tag = ""
+# server.bind = "$webui_bind_4"
+# server.use-ipv6 = "enable"
+# $$SERVER["socket"] == "[$webui_bind_6]:$webui_port" {}
+
+$webui_ip_port
 
 server.modules  = ("mod_rewrite",
                      "mod_redirect",
@@ -25,10 +27,12 @@
 ssl.engine = "enable"
 ssl.pemfile = "/var/run/webui_server.pem"
 ssl.ca-file = "$ssl_cafile"
-ssl.cipher-list = "$ssl_cipherlist"
 ssl.verifyclient.activate = "$ssl_verifyclient"
 ssl.verifyclient.enforce = "$ssl_verifyforce"
-ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL,$ssl_protocol")
+ssl.openssl.ssl-conf-cmd = (
+    "Protocol" => "-ALL,$ssl_protocol",
+    "CipherString" => "$ssl_cipherlist"
+)
 fastcgi.server = (
     "/apv.fcgi" => (
         "main" => (
Index: /branches/rel_apv_10_7_4/usr/click/webui/conf/restfulapi_httpd.conf.ssl
===================================================================
--- /branches/rel_apv_10_7_4/usr/click/webui/conf/restfulapi_httpd.conf.ssl	(revision 40175)
+++ /branches/rel_apv_10_7_4/usr/click/webui/conf/restfulapi_httpd.conf.ssl	(working copy)
@@ -20,11 +20,13 @@
 ssl.engine = "enable"
 ssl.pemfile = "/var/run/restfulapi_httpd.pem"
 ssl.ca-file = "$ssl_cafile"
-ssl.cipher-list = "$ssl_cipherlist"
-#ssl.cipher-list = "EECDH+AESGCM:ECDHE-RSA-AES128-GCM-SHA256:AES256+EECDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!3DES:!EDH:!IDEA"
 ssl.verifyclient.activate = "$ssl_verifyclient"
 ssl.verifyclient.enforce = "$ssl_verifyforce"
-ssl.openssl.ssl-conf-cmd = ("Protocol" => "-ALL,$ssl_protocol")
+ssl.openssl.ssl-conf-cmd = (
+    "Protocol" => "-ALL,$ssl_protocol",
+    "CipherString" => "$ssl_cipherlist"
+)
+# "CipherString" => "EECDH+AESGCM:ECDHE-RSA-AES128-GCM-SHA256:AES256+EECDH:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:ECDHE-RSA-AES256-SHA:ECDHE-RSA-AES128-SHA:AES256-GCM-SHA384:AES128-GCM-SHA256:AES256-SHA256:AES128-SHA256:AES256-SHA:AES128-SHA:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4:!3DES:!EDH:!IDEA"
 
 fastcgi.server = (
     "/apv.fcgi" => (