HTTP/2 is the evolution of the world’s most successful application layer protocol, HTTP. It focuses on making more efficient use of network resources. It does not change the fundamentals of HTTP, the semantics. There are still request and responses and headers and all that. So, if you already know HTTP/1, you know 95% about HTTP/2 as well.

Prerequisites

sudo apt update
sudo apt dist-upgrade 
# install apache2
sudo apt install apache2

# check status 
$ sudo service apache2 status
..
Active: active (running) since Thu 2023-05-11 04:16:10 UTC; 16s ago
   Docs: https://httpd.apache.org/docs/2.4/
..

# check supports HTTP
$ curl --head localhost
..
HTTP/1.1 200 OK
Date: Thu, 11 May 2023 04:20:35 GMT
Server: Apache/2.4.41 (Ubuntu)
Last-Modified: Thu, 11 May 2023 04:16:07 GMT
ETag: "2aa6-5fb633f5f93d2"
Accept-Ranges: bytes
Content-Length: 10918
Vary: Accept-Encoding
Content-Type: text/html
..

Install php7.4 packages

sudo apt install php7.4 php7.4-cgi php7.4-curl php7.4-dev php7.4-fpm php7.4-gd
sudo apt install php7.4-imap php7.4-json php7.4-mbstring php7.4-mysql php7.4-soap
sudo apt install php7.4-xml php7.4-xmlrpc
# Fixed execute .php 
sudo apt install libapache2-mod-php7.4

Disable the mod_php module

sudo apt-get install php7.4-fpm
sudo a2dismod php7.4
sudo a2enconf php7.4-fpm
sudo a2enmod proxy_fcgi

Enable an Apache MPM

# disable mpm_prefork module
sudo a2dismod mpm_prefork

# enable the mpm_event module
sudo a2enmod mpm_event

Enable HTTP/2

# enable and load SSL and HTTP/2 modules
sudo a2enmod ssl
sudo a2enmod http2

#  activate these new modules,
sudo systemctl restart apache2

Edit Apache configuration.

/etc/apache2/sites-available/default-ssl.conf

#   A self-signed (snakeoil) certificate can be created by installing
#   the ssl-cert package. See
#   /usr/share/doc/apache2/README.Debian.gz for more info.
#   If both key and certificate are stored in the same file, only the
#   SSLCertificateFile directive is needed.
SSLCertificateFile	/etc/ssl/certs/ssl-cert-snakeoil.pem
SSLCertificateKeyFile /etc/ssl/private/ssl-cert-snakeoil.key


SSLProtocol all -SSLv3 -TLSv1 -TLSv1.1

# Enable HTTP/2
Protocols h2 http/1.1

Enable Site

# enable and load SSL and HTTP/2 modules
sudo a2ensite default-ssl.conf

#  activate these new modules,
sudo systemctl restart apache2
sudo service php7.4-fpm restart

Check HTTP

$ curl --head --insecure https://localhost/
HTTP/2 200 
date: Thu, 11 May 2023 04:43:08 GMT
server: Apache/2.4.41 (Ubuntu)
last-modified: Thu, 11 May 2023 04:16:07 GMT
etag: "2aa6-5fb633f5f93d2"
accept-ranges: bytes
content-length: 10918
vary: Accept-Encoding
content-type: text/html

View header and body with curl

curl -v -H "Accept: application/text" --insecure https://localhost

Reference

• howtoforge