Currently I am using Apache 2.4.9 OpenSSL 1.0.1g (VC10), want to migrate openSSL 1.0.1h to resolve the vulnerability issue.is there way to migrate openssl alone in my existing apache build ?
View 9 RepliesDo you have plans for building Apache 2.4 with OpenSSL 1.0.2? One good reason for upgrading Apache to OpenSSL to 1.0.2 would be the ability to disable TLS session tickets, eq. when using PFS:
Code : SSLOpenSSLConfCmd Options -SessionTicket
Here are a few references:
[URL] ....
[URL] ....
I tried to experiment with replacing OpenSSL dlls and exe in apachein directory but that did not work, because it looks like SSLOpenSSLConfCmd configuration directive is only available when Apache is compiled against OpenSSL 1.0.2.
we need to upgrade the openssl modules, we have apache 2.2 installed and openssl version is 1.0.0,apache and openssl are in solaris9 SPARC.
View 4 Replies View RelatedLast week I have updated the apache from 2.4.6 to 2.4.9 version in Win 2008, 64-bit server. There was no openSSL and update was successful. Later I did the update in QA with openSSL and again the updte was successfully completed. Apache services was running fine and everything looked nice.
When I did the same update in the prd where openSSL is also there, it failed to start the service.
steps to update the apache from 2.4.6 to 2.4.9
----------------------------------------------
1> stop the apache services
2> Take the backup by copying original Apache installation directory and rename it . (eg I:Program Files (x86)Apache Software FoundationApache2.2 to Apache2.2_old)
3> Unzip the latest binaries to the temp directory
4> Copy the following files apachebin , apachemodules to the Apache Inst Directory ( I:Program Files (x86)Apache Software FoundationApache2.2)
5> start the apache service
----------------------------------------------------
QA and PRD both has enabled openSSL but it was prd where we got the issue , and the apache services couldnt be started. We have had to revert the change. Find the error log in the apache directory
--------------------------
[Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] AH02561: Failed to configure certificate
RGWEB58V.brotherdc.eu:443:0, check G:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/server.crt
[Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:0906D06C:PEM
routines:PEM_read_bio:no start line (Expecting: CERTIFICATE) -- Bad file contents or format - or even just a
forgotten SSLCertificateKeyFile? [Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:140AD009:SSL
routines:SSL_CTX_use_certificate_file:PEM lib
---------------------------------------
I read somewhere that there is bug in 2.4.9 as this version breaks the openSSL.
Also read on this forum that someone resolved the issu by changing the server certificate from DER to PEM.
c:Apache24bin>openssl.exe
WARNING: can't open config file: c:/openssl-1.0.1e-X64/ssl/openssl.cnf
OpenSSL>
I'm getting the below error message when trying to perform "configtest" after upgrading apache to 2.4.12 version with success.
/home/apache/bin/httpd: symbol lookup error: /home/apache/bin/httpd: undefined symbol: SSL_CONF_CTX_new
Note: I received the error after recently upgrading my openssl to 1.0.2.
Just wonder how to get rid of the error message.
Running on Ubuntu Server 12.04.05 LTS 32bit.
How easy is it to migrate both Apache and PHP from VC6 to VC9? Is there a tutorial somehwere? This is on a production server. So I would need it not to break my Apache/PHP install.
View 1 Replies View RelatedRHEL4 Box
No Control Panel
Current Version of OpenSSL = OpenSSL 0.9.7a Feb 19 2003
which is the most current version available via 'up2date'.
Need to update to 0.9.8.
I have download the source for 0.9.8h and have:
#./config --prefix=/usr/local --openssldir=/usr/local/openssl
#make
#make test
#make install
All commands ran without errors.
When I run:
# openssl version
OpenSSL 0.9.7a Feb 19 2003
# whereis openssl
openssl: /usr/bin/openssl /usr/local/bin/openssl /usr/include/openssl /usr/local/openssl /usr/share/man/man1/openssl.1ssl.gz
# rpm -qa | grep openssl
openssl-devel-0.9.7a-43.17.el4_6.1
openssl-0.9.7a-43.17.el4_6.1
xmlsec1-openssl-1.2.6-3
openssl096b-0.9.6b-22.46
How can I get the version updated?
what is the best way to upgrade Openssl
to the latest version
openssl-0.9.8g
in my cpanel server
openssl version
OpenSSL 0.9.7a Feb 19 2003
I might still be a bit too close to the newbie level to be trying this
but I wanted upgrade various components of my cpanel install for security issues.
So I got openssl to update to 0.9.8g and that seemed to be working correctly.
Quote:
openssl version
OpenSSL 0.9.8g 19 Oct 2007
So now I am trying to build PHP 4.4.8 like this:
Quote:
./configure --with-litespeed --with-config-file-path=../php --with-mysql=/usr --with-zlib --with-zlib-dir=.. --with-gd --with-jpeg-dir=.. --with-png-dir=.. --enable-shmop --enable-track-vars --enable-sockets --enable-sysvsem --enable-sysvshm --enable-magic-quotes --with-openssl
And it fails because of the openssl:
Quote:
Make
...
In function `zif_openssl_seal':
/php-4.4.8/ext/openssl/openssl.c:2885: undefined reference to `EVP_CIPHER_CTX_block_size'
collect2: ld returned 1 exit status
(I tried --with-openssl=/usr with no change)
so I got OpenSSL 0.9.8k up and installed, no issued:
Quote:
# openssl
OpenSSL> version
OpenSSL 0.9.8k 25 Mar 2009
OpenSSL>
Rebuilt cURL (and then php), httpd and proftpd but all of them are still linking to the older libraries for some reason
Quote:
# curl -V
curl 7.19.4 (x86_64-unknown-linux-gnu) libcurl/7.19.4 OpenSSL/0.9.8g zlib/1.2.3
Protocols: tftp ftp telnet dict ldap http https ftps
Features: IPv6 Largefile NTLM SSL libz
Quote:
[Tue Apr 14 00:11:03 2009] [notice] Apache/2.2.11 (Unix) mod_ssl/2.2.11 OpenSSL/0.9.8g DAV/2 PHP/5.2.9 Apache configured -- resuming normal operations
Quote:
Starting proftpd: - mod_tls/2.2.1: compiled using OpenSSL version 'OpenSSL 0.9.8i 15 Sep 2008' headers, but linked to OpenSSL version 'OpenSSL 0.9.8g 19 Oct 2007' library
proftpd has its own set of issues obviously built with i headers and linked to g headers. Any ideas wtf I did? I recomplined and restarted everything. I removed the g and i libraries completely. OpenSSH seems happy and nothing is actually "wrong", the server is working fine but I'm really anal retentive this way...it's kinda how I feel "safer" at the OS level.
I'm trying to connect to the server via SFTP but when I check the box to do that in Total Commanders settings box it says I need the OpenSSL dll's. I downloaded the must current file from [url] but I can't find any dll files in it and I'm unsure how to proceed.
View 1 Replies View RelatedWe're having problems with the Roundcube webmail spell check, and upon checking the log we get the error 'Unable to find the socket transport SSL'. From what I can find out this is normally due to Open SSL not being enabled, but it is, you can check our php config here.
View 3 Replies View RelatedI currently run a dedicated server with redhat 9 installed and will be migrating to a new server with a choice of Red Hat Fedora Core, CentOS 5.x, FreeBSD 6.x, FreeBSD 7.x
I dont have experience with these o/s's and was wondering if anyone has had a similar experience of migration or admin and would recomend the best in their opinion to go to, bearing in mind I am currently on redhat 9 and know that o/s pretty well.
I am trying to migrate a user from a shared hosting account to a new account on my VPS, however.... whenever I do i keep on getting that the archive MD5 does not match.
View 8 Replies View RelatedI called up the LT staff and they assured me that if everything went properly step by step the whole process should not take more than 2 hours.
As far as the cost is concerned they will be deciding the cost on a case to case basis.
I have mailed them details of my 2 servers and awaiting further response from them
I currently have a couple servers with NAC and am looking to replace one of them with something a little more "up to date".
They said it would be no problem to move the old IPs to the new machine. As some of my customers are using my applications based on IP address, I don't want to necessarily interrupt their service. If it were simply hostnames they were using, it would be easy.. but since some are based on IP address, seems more difficult based on my what I know.
Is there any way to do this in a seamless fashion with little or no downtime?
I'm currently on a Linode VPS and have a couple of websites that I want to migrate to a dedicated box. I wonder what would be the easiest way to do this: website files/directories, mysql databases, etc.
Can I run 'scp' to scoop everything out to the new server?
By the way, I don't have any control panel installed on the server.
I would like to purchase a server for personal use with one hard drive, and after a couple of months I would like to upgrade to RAID 1 (by paying extra for the RAID controller and the second hard drive). Is it possible to just migrate to RAID 1? I'm not sure if that's possible. Maybe you can just completely mirror the first HD to the new HD and then continue with RAID 1? Or does it require an OS reinstall? According to SoftLayer live sales chat, it's not possible. According to Server4Sale live chat, it is possible.
View 7 Replies View RelatedProbably been asked a million times but after spending 30 min searching since the limit is 130 seconds between searches... Anyway, i am VERY unhappy with ModVPS as my server keeps going on and off and on and off and they tell me its "fixed" but it keeps doing it to all of my staff even... anyway enough of that
I purchased a really nice dedicated server and need to know how to migrate all accounts over without having any downtime and allowing people to still use their website as normal. I have about 60 clients and would hate to see one of them upset because their data was lost during propagation when they connected to the old server instead of the new, exc.
Is the best method to setup a cluster through cpanel? Or is there a better way?
I am hosting my wordpress blog on a web hosting that is not that reliable as it go down once in a while for few hours without any prior notification of sheduled maintenance.
However, i have a question. How do i migrate a wordpress blog with everything intact.. data, information, application, plugins, graphics and domain name?
How would you migrate a highly activate mysql db to another server without downtime.
I can easily point the IP in the script to the new server in 1 second.
However, how to physically move the DB instantly without downtime?
I don't like the idea of export, import and then point IP.
we should change our cpanel to plesk.
what's your suggestions and what should I do for this?
the CSF Firewall can run on PLESK?
I have a client that is using proboards.com and they are tired of all the ads / limitations. They want to migrate to their own copy of SMF but they have over 1000 users and tons of posts.
Does anyone know if you can migrate your data from proboards.com?
As the title reads, what is the best method if you using WHM to migrate accounts from one server to the other and experience the least amount of downtime?
I know WHM has it's function where you can migrate all the accounts simply. And from my view point, you should migrate the accounts, then update the DNS (nameservers) for the new server, and that would reduce the downtime?
After researched and looked around for info, i decide to go with DA but i still have a problem with my current server that if I'd like to migrate all my email accounts from OS X server to FreeBSD and reload the OS X server for that box to use for other purpose. I wonder if it is possible to migrate all email accounts from Mac OS X server to FreeBSD ?
For FreeBSD box, I am going to use DirectAdmin for web control panel since that box is AMD based. I would appreciate a lot for your help or hint otherwise thanks for reading.
We will be soon migrating to a bigger more powerful server and we were wondering if there was any companies that can do a nice job regarding this matter...
We found rack911.com but we were wondering if there were any others and if you had any experience with them.
I have now 10 websites hosted in a hosting company. But i now want to move all this websites to another host.
So all the websites are based in html and flash (no databases or php).
So i will need to upload all the websites to the new host, then point my dns to the new nameservers. Right? im i forgeting something?
And about the emails, how can i copy/import all the existing emais ti the new host?
At my company we have running some Helm 3/4 servers and we've installed a new server with Plesk 12 for testing.Do you know a good way to migrate these servers (more than 6) to Plesk 12?.Helm is bringing to me a lot of problems and also servers must be renewed.
View 1 Replies View RelatedWhen trying to migrate from one 12.0.18 Update #26 to another, I got always the same error:
Details
Error:
Unable to download dump files to local store.
Error:
The network path was not found