Apache :: How To Update Openssl
Apr 5, 2013we need to upgrade the openssl modules, we have apache 2.2 installed and openssl version is 1.0.0,apache and openssl are in solaris9 SPARC.
View 4 Replies
ADVERTISEMENT
Update Openssl
Jul 2, 2008RHEL4 Box
No Control Panel
Current Version of OpenSSL = OpenSSL 0.9.7a Feb 19 2003
which is the most current version available via 'up2date'.
Need to update to 0.9.8.
I have download the source for 0.9.8h and have:
#./config --prefix=/usr/local --openssldir=/usr/local/openssl
#make
#make test
#make install
All commands ran without errors.
When I run:
# openssl version
OpenSSL 0.9.7a Feb 19 2003
# whereis openssl
openssl: /usr/bin/openssl /usr/local/bin/openssl /usr/include/openssl /usr/local/openssl /usr/share/man/man1/openssl.1ssl.gz
# rpm -qa | grep openssl
openssl-devel-0.9.7a-43.17.el4_6.1
openssl-0.9.7a-43.17.el4_6.1
xmlsec1-openssl-1.2.6-3
openssl096b-0.9.6b-22.46
How can I get the version updated?
The Best Way To Update Openssl
Mar 21, 2008what is the best way to upgrade Openssl
to the latest version
openssl-0.9.8g
in my cpanel server
openssl version
OpenSSL 0.9.7a Feb 19 2003
Apache :: 2.4.12 Build With OpenSSL 1.0.2
Feb 11, 2015Do you have plans for building Apache 2.4 with OpenSSL 1.0.2? One good reason for upgrading Apache to OpenSSL to 1.0.2 would be the ability to disable TLS session tickets, eq. when using PFS:
Code : SSLOpenSSLConfCmd Options -SessionTicket
Here are a few references:
[URL] ....
[URL] ....
I tried to experiment with replacing OpenSSL dlls and exe in apachein directory but that did not work, because it looks like SSLOpenSSLConfCmd configuration directive is only available when Apache is compiled against OpenSSL 1.0.2.
Apache :: Way To Migrate Openssl Alone
Jul 1, 2014Currently I am using Apache 2.4.9 OpenSSL 1.0.1g (VC10), want to migrate openSSL 1.0.1h to resolve the vulnerability issue.is there way to migrate openssl alone in my existing apache build ?
View 9 Replies View RelatedApache :: Updating From 2.4.6 To 2.4.9 Breaks OpenSSL
Jun 25, 2014Last week I have updated the apache from 2.4.6 to 2.4.9 version in Win 2008, 64-bit server. There was no openSSL and update was successful. Later I did the update in QA with openSSL and again the updte was successfully completed. Apache services was running fine and everything looked nice.
When I did the same update in the prd where openSSL is also there, it failed to start the service.
steps to update the apache from 2.4.6 to 2.4.9
----------------------------------------------
1> stop the apache services
2> Take the backup by copying original Apache installation directory and rename it . (eg I:Program Files (x86)Apache Software FoundationApache2.2 to Apache2.2_old)
3> Unzip the latest binaries to the temp directory
4> Copy the following files apachebin , apachemodules to the Apache Inst Directory ( I:Program Files (x86)Apache Software FoundationApache2.2)
5> start the apache service
----------------------------------------------------
QA and PRD both has enabled openSSL but it was prd where we got the issue , and the apache services couldnt be started. We have had to revert the change. Find the error log in the apache directory
--------------------------
[Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] AH02561: Failed to configure certificate
RGWEB58V.brotherdc.eu:443:0, check G:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/server.crt
[Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:0906D06C:PEM
routines:PEM_read_bio:no start line (Expecting: CERTIFICATE) -- Bad file contents or format - or even just a
forgotten SSLCertificateKeyFile? [Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:140AD009:SSL
routines:SSL_CTX_use_certificate_file:PEM lib
---------------------------------------
I read somewhere that there is bug in 2.4.9 as this version breaks the openSSL.
Also read on this forum that someone resolved the issu by changing the server certificate from DER to PEM.
Apache :: OpenSSL - Cannot Open Config File
Feb 24, 2015c:Apache24bin>openssl.exe
WARNING: can't open config file: c:/openssl-1.0.1e-X64/ssl/openssl.cnf
OpenSSL>
Apache :: OpenSSL 1.0.2 - Symbol Lookup Error
Feb 20, 2015I'm getting the below error message when trying to perform "configtest" after upgrading apache to 2.4.12 version with success.
/home/apache/bin/httpd: symbol lookup error: /home/apache/bin/httpd: undefined symbol: SSL_CONF_CTX_new
Note: I received the error after recently upgrading my openssl to 1.0.2.
Just wonder how to get rid of the error message.
Running on Ubuntu Server 12.04.05 LTS 32bit.
Upgraded To Openssl 0.9.8g But Now Can't Get PHP To Build
Feb 22, 2008I might still be a bit too close to the newbie level to be trying this
but I wanted upgrade various components of my cpanel install for security issues.
So I got openssl to update to 0.9.8g and that seemed to be working correctly.
Quote:
openssl version
OpenSSL 0.9.8g 19 Oct 2007
So now I am trying to build PHP 4.4.8 like this:
Quote:
./configure --with-litespeed --with-config-file-path=../php --with-mysql=/usr --with-zlib --with-zlib-dir=.. --with-gd --with-jpeg-dir=.. --with-png-dir=.. --enable-shmop --enable-track-vars --enable-sockets --enable-sysvsem --enable-sysvshm --enable-magic-quotes --with-openssl
And it fails because of the openssl:
Quote:
Make
...
In function `zif_openssl_seal':
/php-4.4.8/ext/openssl/openssl.c:2885: undefined reference to `EVP_CIPHER_CTX_block_size'
collect2: ld returned 1 exit status
(I tried --with-openssl=/usr with no change)
Apache Do Not Update
Aug 4, 2009i enable Mbstrings and Soap in easyapache in Cpanel.
after 24 hours i restart my server and some things get eror.
tmp folder become read only.
easy apache give below eror :
Code:
Died at /var/cpanel/perl/easy/Cpanel/Easy/Utils/BackGround.pm line 40.
and all site have eror for tmp and mysql.
i change tmp folder but some eror don't solved.
Code:
Can't create/write to file '/tmp/#sql_1f42_0.MYI' (Errcode: 30) SQL=SELECT m.*, sum(case when p.published=1 then 1 else 0 end) as cnt FROM jos_menu AS m LEFT JOIN jos_menu AS p ON p.parent = m.id WHERE m.menutype='mainmenu' AND m.published='1' AND m.access <= '0' GROUP BY m.id ORDER BY m.parent, m.ordering
Warning: Invalid argument supplied for foreach() in /home/music/public_html/modules/mod_tpmenu/tpmenu/dropdown/menu.php on line 127
Warning: array_key_exists() [function.array-key-exists]: The second argument should be either an array or an object in /home/music/public_html/modules/mod_tpmenu/tpmenu/dropdown/menu.php on line 150
this is mount command :
Code:
/dev/mapper/VolGroup00-LogVol00 on / type ext3 (rw,usrquota)
proc on /proc type proc (rw)
sysfs on /sys type sysfs (rw)
devpts on /dev/pts type devpts (rw,gid=5,mode=620)
/dev/sda1 on /boot type ext3 (rw)
tmpfs on /dev/shm type tmpfs (rw)
none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw)
/usr/tmpDSK on /tmp type ext3 (rw,noexec,nosuid,loop=/dev/loop0)
and this is fstabs :
Code:
/dev/VolGroup00/LogVol00 / ext3 defaults,usrquota 1 1
LABEL=/boot /boot ext3 defaults 1 2
tmpfs /dev/shm tmpfs defaults 0 0
devpts /dev/pts devpts gid=5,mode=620 0 0
sysfs /sys sysfs defaults 0 0
proc /proc proc defaults 0 0
/dev/VolGroup00/LogVol01 swap swap defaults 0 0
/usr/tmpDSK /tmp ext3 defaults,noauto 0 0
OpenSSL - CURL, Httpd And Proftpd
Apr 14, 2009so I got OpenSSL 0.9.8k up and installed, no issued:
Quote:
# openssl
OpenSSL> version
OpenSSL 0.9.8k 25 Mar 2009
OpenSSL>
Rebuilt cURL (and then php), httpd and proftpd but all of them are still linking to the older libraries for some reason
Quote:
# curl -V
curl 7.19.4 (x86_64-unknown-linux-gnu) libcurl/7.19.4 OpenSSL/0.9.8g zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http https ftps
Features: IPv6 Largefile NTLM SSL libz
Quote:
[Tue Apr 14 00:11:03 2009] [notice] Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8g DAV/2 PHP/5.2.9 Apache configured -- resuming normal operations
Quote:
Starting proftpd: - mod_tls/2.2.1: compiled using OpenSSL version 'OpenSSL 0.9.8i 15 Sep 2008' headers, but linked to OpenSSL version 'OpenSSL 0.9.8g 19 Oct 2007' library
proftpd has its own set of issues obviously built with i headers and linked to g headers. Any ideas wtf I did? I recomplined and restarted everything. I removed the g and i libraries completely. OpenSSH seems happy and nothing is actually "wrong", the server is working fine but I'm really anal retentive this way...it's kinda how I feel "safer" at the OS level.
Cant Access Apache Update In WHM
Jul 10, 2008Can't access apache update in WHM I get an http 500 error page.
View 4 Replies View RelatedUpdate Apache And Php In Plesk
Jun 21, 2008How can I update my apache and php to latest version in PLESK?
I need to install GD and Zend Optimizer too.
Apache Update Problems (yum)
Sep 14, 2007Just started running a new VPS and have tried to update apache through WHM and I get this error :
Checking Update System........Your operating system's rpm update method (yum) was not able to locate the glibc package. This is an indication of an improper setup. You must correct this error before you can proceed.
Someone told me to check out yum so I ran a command that he told me too and got this output :
Traceback (most recent call last):
File "/usr/bin/yum", line 29, in ?
yummain.main(sys.argv[1:])
File "/usr/share/yum-cli/yummain.py", line 94, in main
result, resultmsgs = base.doCommands()
File "/usr/share/yum-cli/cli.py", line 381, in doCommands
return self.yum_cli_commands[self.basecmd].doCommand(self, self.basecmd, self.extcmds)
File "/usr/share/yum-cli/yumcommands.py", line 150, in doCommand
return base.updatePkgs(extcmds)
File "/usr/share/yum-cli/cli.py", line 672, in updatePkgs
self.doRepoSetup()
File "/usr/share/yum-cli/cli.py", line 109, in doRepoSetup
self.doSackSetup(thisrepo=thisrepo)
File "/usr/lib/python2.4/site-packages/yum/__init__.py", line 338, in doSackSetup
self.repos.populateSack(which=repos)
File "/usr/lib/python2.4/site-packages/yum/repos.py", line 200, in populateSack
sack.populate(repo, with, callback, cacheonly)
File "/usr/lib/python2.4/site-packages/yum/yumRepo.py", line 91, in populate
dobj = repo.cacheHandler.getPrimary(xml, csum)
File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 100, in getPrimary
return self._getbase(location, checksum, 'primary')
File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 93, in _getbase
self.updateSqliteCache(db, parser, checksum, metadatatype)
File "/usr/lib/python2.4/site-packages/yum/sqlitecache.py", line 382, in updateSqliteCache
cur.execute("DELETE FROM "+table+ " where pkgKey in %s" % delpkgs)
File "/usr/lib/python2.4/site-packages/sqlite/main.py", line 244, in execute
self.rs = self.con.db.execute(SQL)
_sqlite.DatabaseError: unable to open database file
Its the database error that worries me, can anyone help me out with how to fix this?
Running WHM 11.2.0 cPanel 11.11.0-S16999
CENTOS Enterprise 5 i686 - WHM X v3.1.0
OpenSSL Dll Files - Total Commander 7 - SFTP
Jun 13, 2007I'm trying to connect to the server via SFTP but when I check the box to do that in Total Commanders settings box it says I need the OpenSSL dll's. I downloaded the must current file from [url] but I can't find any dll files in it and I'm unsure how to proceed.
View 1 Replies View RelatedError When Trying To Run Apache Update (cPanel)
Feb 16, 2008I got a new server online today with a fresh installation of centos and cPanel:
WHM 11.15.0 cPanel 11.18.1-R20683
CENTOS Enterprise 5 i686 on standard - WHM X v3.1.0
I have done the initial setup (ip's nameservers etc..) but when I try and run apache update I get the following:
Premature end of script headers: /usr/local/cpanel/whostmgr/docroot/cgi/easyapache.pl: Please check /usr/local/cpanel/logs/error_log for the exact error.
I look in the log file but it just repeatse the above error and doesnt supply any additional info.
POP Server Error After Apache Update
Jul 2, 2007I run a dedicated server with WHM/cPanel (10.8.0).
I was recently supposed to update the Apache installation to add a module, but instead of clicking "load previous config" I clicked on "start build" by mistake. This brought the installation back to default.
I waited till the build was finished and then added all the modules I could remember having installed earlier. This made Apache not wanting to start. I went back to the default and then recompiled apache over and over again, adding 1 o 2 modules every time. Apache booted up fine, but for some reason my mail is suddenly acting up.
I keep getting the following error on one of my domain in my client:
Code:
Unable to connect to POP server mail.example.com.
Error sending password: -ERR Maildir invalid (no 'cur' directory)
When I click OK, I get:
Code:
Unable to connect to POP server mail.example.com.
Error sending password: Operation now in progress
I have a couple of other accounts in the mail client. None of them are receiving mails, even though I can see that there are new mails present in the mailbox via webmail.
My exim is configured to use mbox as far as I know. So I don't understand why I'm getting an invalid maildir message.
Apache :: Not Starting After Windows 8.1 Update
Apr 5, 2014My Apache server not starting after Window 8.1 update.Read some solutions that it might have conflict with skype, i have uninstalled skype still same problem.
Apache Version 2.4.7 (win 32)
Php version 5.5.5
PHP + OpenSSL, Error Unable To Find The Socket Transport SSL
Jun 20, 2009We're having problems with the Roundcube webmail spell check, and upon checking the log we get the error 'Unable to find the socket transport SSL'. From what I can find out this is normally due to Open SSL not being enabled, but it is, you can check our php config here.
View 3 Replies View RelatedUsed Apache Update/some PHP Scripts No Longer Working
Jan 26, 2008Having some issues here, I used Apache Update to install WHMCS as I didn't have Curl installed. Well had some issues using the username and password as it couldn't connect to the database, my modernbill and phpnuke scripts still work but some other scripts like joomla, some shopping cart software, and other MYSQL scripts are not working.
I've run test scripts to see if I can connect to the database, got the following error with the PHP test script
Warning: mysql_connect() [function.mysql-connect]: Access denied for user 'data_invoice'@'localhost' (using password: YES) in /home/data/public_html/test2.php on line 4
I cannot connect to the database because:Access denied for user 'data_invoice'@'localhost' (using password: YES)
Also attempted it in SSH and getting a similar error that access is denied. Username and password are correct. I believe I upgraded PHP which my guess is what caused this. I've searched the forum for a few solutions and I had the problem in the past which I fixed it, but it's been a while.
Update Server Without Updating Mysql And Apache
Aug 5, 2008i would like to update my CentOS Linux 5 but i don't want to update mysql and apache i need to use mysql 4. When i entered yum update i can see Total download size: 245 M i can see mysql i386 5.0.45-7.el5 base 4.1 M
how can update my server without updating mysql and apache
Server Update, Too Many Apache Processes But Low Load
Apr 24, 2007I have 2 almost similar webservers:
debian 3.2, P4 3GHZ, 1 Gb ram, kernel 2.6, apache2, php4
Initial apache2.conf:
Code:
Timeout 4
KeepAlive Off
KeepAliveTimeout 2
ServerLimit 1500
<IfModule prefork.c>
StartServers 10
MinSpareServers 10
MaxSpareServers 15
MaxClients 1500
MaxRequestsPerChild 3000
</IfModule>
I update the sources.list on server 1 to mirrors of the new debian 4 etc . I run apt-get update and apt-get dist-upgrade . A whole bunch of things get updated (it was long time ago that I did this anyway). After some troubles with /boot/grub/menu.lst the server boots ok, and everything is well. This server used to have loads of 15-25 at peak times, but after the update its running very smooth with loads of 2-3 at the same peak times. I dont know why exactly, as I noticed updates in OS , kernel version (from 2.6.8x to 2.6.18) , apache2 , php (4.4.4-8+etch1) , and I also needed to update eaccelerator from 0.94 to 0.95 .
A few days later I update server 2. Everything seems to go the same, although the kernel version stays at 2.6.8-3-686. I dont think kernel version at start was exactly same at server 1. But the new php version is the same as server 1, and everything else looks the same too.
But when peak times are coming up, this server starts to have troubles. It is quickly rising to total of 200-300 processes , while server 1 always stays stable at 60-70.
Server 2 also reacts slow if I click somewhere on the site. It takes 5-10 seconds to show a new page. However the load stays pretty low at 1-2 . I see no big cpu usage and also no big memory usage. I have the impression that this server 2 is somehow wasting a lot of apache processes and is making things hard for itself without a real reason.
When I check the seperate mysql database server, I also notice a lot of processes.
Around 200-250 whereas it used to be 40-60. Sometimes this adds up so hard, that all webservers are blocked because mysql has too much processes. When I check the mysql connections, I see a few dozen things like 'unauthen ip:port Connect login' just hanging. All of them have the ip of webserver 2. Those extra apache processes are somehow hanging on to the mysql server without really doing something.
I dont know what is happening, but this server is underperforming very badly now. I managed to limit the problem by drastically lowering ServerLimit and MaxClients on webserver 2 , but this is no real solution. The server is still slow, at least now its not bringing down the others.
My question : what should I check for now ? I noticed a different structure in the conf files in debian etch, maybe something new has a bad influence on my old conf files? Is there something wrong with the combination of kernel+php version? I have no idea, please point me in the right direction so I can learn from this.
Apache 2.2 / Php 5 Update: Calling Files Behind Root
May 24, 2008With my old Apache 1 and PHP4 I was able to pull files from behind the public_html using a php file without any problems. Is there a reason why this does not work with Apache 2.2 and PHP5?
the piece of coding below is what grabs the image. Right now i'm just seeing a red X for each image.
PHP Code:
if ($private == 1) {
header("Content-type: image/jpeg");
$im = imagecreatefromjpeg('/home/site1/private/' . $type . '/' . $mid . '-' . $iid . '.jpg');
imagecolorallocate($im, 255, 255, 255);
imagejpeg($im);
imagedestroy($im);
}
Apache :: 500 Internal Server Error After Update
Jan 17, 2015I've been running my website for years and now yesterday I update 2 files, the same way I always do, and when I try to load them in a browser I get:
Internal Server Error
The server encountered an internal error or misconfiguration and was unable to complete your request.
The log says this:
[my ip] - - [17/Jan/2015:00:07:55 -0500] "GET /site/index.php HTTP/1.1" 404 - "-" [my agent string]
Permissions are 644, same as for the other files. I haven't encountered anything like this before and am totally stumped.
Apache :: Looking To Update Entire Webserver Configuration
Dec 2, 2013production looking to use latest version of apache from apache lounge:
Apache 2.4.7 Win64
Which version of PHP is recommend?
Which version of WinCache is recommended?
Which version of mysql is recommended?
I've looked into WinCache how to install it and hook it up to php, but i'm guessing you add the extensions in the php.ini?
Recompile Apache :: Your Operating System's Rpm Update Method (yum) Was Not ..
Aug 29, 2007i tried recompile Apache to install
--curl
--curl ssl
--mcrypt
by running /scripts/easyapache
then i get the error below. Can anyone help me out? i really dont know what todo here.
Checking Update System........Your operating system's rpm update method (yum) was not able to locate the glibc package. This is an indication of an improper set up. You must correct this error before you can proceed.
Mysql Insert/Update Makes Apache Go Crazy
Aug 12, 2007I run a wordpress blog with apache2+mysql5+php5 in a Debian vps with 1024mb ram (plus swap).
When you read the website everything works quick and smooth, but when you have to add data to the database (edit posts, write posts, write comments) something weird happens.
monitoring the system with the top and I see that, for example, as soon as an article has been posted (already got the "article posted" message in the page) the free ram goes suddenly down (some seconds) from 800mb to 0. Swapping starts and the website stops responding. in the meanwhile cpu "wa" goes high (90%++).
Typing ps aux I can see that is not mysql process's fault, actually it seems more that it's apache to cause this ram hogging, in fact an apache restart brings back tons of free ram.
this is my current my.cnf:
Code:
client]
port= 3306
socket= /var/run/mysqld/mysqld.sock
# Here is entries for some specific programs
# The following values assume you have at least 32M ram
# This was formally known as [safe_mysqld]. Both versions are currently parsed.
[mysqld_safe]
socket= /var/run/mysqld/mysqld.sock
nice= 0
[mysqld]
#
# * Basic Settings
#
user= mysql
pid-file= /var/run/mysqld/mysqld.pid
socket= /var/run/mysqld/mysqld.sock
port= 3306
basedir= /usr
datadir= /var/lib/mysql
tmpdir= /tmp
language= /usr/share/mysql/english
skip-external-locking
#
# Instead of skip-networking the default is now to listen only on
# localhost which is more compatible and is not less secure.
bind-address= 127.0.0.1
#
# * Fine Tuning
#
myisam_sort_buffer_size=64M
max_connect_errors=20
connect_timeout=15
interactive_timeout=100
join_buffer_size=1M
sort_buffer_size=1M
read_buffer_size=1M
bulk_insert_buffer_size=16M
key_buffer= 64M
max_allowed_packet= 16M
thread_stack= 128K
thread_cache_size= 8
max_connections = 600
table_cache = 256
#thread_concurrency = 10
#
# * Query Cache Configuration
#
query_cache_limit = 1M
query_cache_size = 16M
#
# * Logging and Replication
#
# Both location gets rotated by the cronjob.
# Be aware that this log type is a performance killer.
#log= /var/log/mysql/mysql.log
#
# Error logging goes to syslog. This is a Debian improvement :)
#
# Here you can see queries with especially long duration
#log_slow_queries= /var/log/mysql/mysql-slow.log
#long_query_time = 2
#log-queries-not-using-indexes
#
# The following can be used as easy to replay backup logs or for replication.
#server-id= 1
#log_bin= /var/log/mysql/mysql-bin.log
# WARNING: Using expire_logs_days without bin_log crashes the server! See README.Debian!
#expire_logs_days= 10
#max_binlog_size = 100M
#binlog_do_db= include_database_name
#binlog_ignore_db= include_database_name
#
# * BerkeleyDB
#
# Using BerkeleyDB is now discouraged as its support will cease in 5.1.12.
skip-bdb
#
# * InnoDB
#
# InnoDB is enabled by default with a 10MB datafile in /var/lib/mysql/.
# Read the manual for more InnoDB related options. There are many!
# You might want to disable InnoDB to shrink the mysqld process by circa 100MB.
skip-innodb
#
# * Security Features
#
# Read the manual, too, if you want chroot!
# chroot = /var/lib/mysql/
#
# For generating SSL certificates I recommend the OpenSSL GUI "tinyca".
#
# ssl-ca=/etc/mysql/cacert.pem
# ssl-cert=/etc/mysql/server-cert.pem
# ssl-key=/etc/mysql/server-key.pem