Upgraded To Openssl 0.9.8g But Now Can't Get PHP To Build
Feb 22, 2008
I might still be a bit too close to the newbie level to be trying this
but I wanted upgrade various components of my cpanel install for security issues.
So I got openssl to update to 0.9.8g and that seemed to be working correctly.
Make
...
In function `zif_openssl_seal':
/php-4.4.8/ext/openssl/openssl.c:2885: undefined reference to `EVP_CIPHER_CTX_block_size'
collect2: ld returned 1 exit status
Do you have plans for building Apache 2.4 with OpenSSL 1.0.2? One good reason for upgrading Apache to OpenSSL to 1.0.2 would be the ability to disable TLS session tickets, eq. when using PFS:
Code : SSLOpenSSLConfCmd Options -SessionTicket
Here are a few references:
[URL] ....
[URL] ....
I tried to experiment with replacing OpenSSL dlls and exe in apachein directory but that did not work, because it looks like SSLOpenSSLConfCmd configuration directive is only available when Apache is compiled against OpenSSL 1.0.2.
I have recently upgraded our server from Server 2000 to Server 2003. Everything was running smoothly except for one thing.
It keeps on forgetting how to display .asp pages.
When I view the website all I get is a white screen as if its loading the page but never does, the busy icon up at the top right hand side of the browser contines to spin but nothing. If I try and view a .html page it works without a problem. So the server is running and it can read .html files without a problem.
Now here is the strange bit, if I restart the the WWW publishing service on the server the .asp page all of a sudden work and continue to work until the following morning when it all dies again.
I have checked the event logs and there is no errors or anything that I can see that would be causing this problem.
Has anyone else had similiar problem or at least have an idea on how to fix this. I can't be restarting the WWW publishing service every day just so .asp pages work!
I was thinking of upgrading my centos 4.5 systems to 5 but all over their docs its like they are telling you doing any sort of upgrade especially yum upgrade will break everything. It keeps saying fresh install is reccomended method.
Currently I am using Apache 2.4.9 OpenSSL 1.0.1g (VC10), want to migrate openSSL 1.0.1h to resolve the vulnerability issue.is there way to migrate openssl alone in my existing apache build ?
Starting proftpd: - mod_tls/2.2.1: compiled using OpenSSL version 'OpenSSL 0.9.8i 15 Sep 2008' headers, but linked to OpenSSL version 'OpenSSL 0.9.8g 19 Oct 2007' library
proftpd has its own set of issues obviously built with i headers and linked to g headers. Any ideas wtf I did? I recomplined and restarted everything. I removed the g and i libraries completely. OpenSSH seems happy and nothing is actually "wrong", the server is working fine but I'm really anal retentive this way...it's kinda how I feel "safer" at the OS level.
We upgraded 7 servers from our network from PHP 4.4.7 to PHP 5.2.5, and Apache 1.3.3.9 to Apache 2.0.61. In only one of this servers we found problems with includes...
Include example that works:
Code: <? include("http://www.google.com"); ?> This doesnt work:
Code: <? include("path/file.php"); ?> And path/file.php does exist, also log error from apache doesnt even show a line .
allow_url_fopen was replaced by allow_url_include and it's set to On.
Im using PHP 5.2.5, Apache 2.0.61, cPanel and RHES 4.
Last week I have updated the apache from 2.4.6 to 2.4.9 version in Win 2008, 64-bit server. There was no openSSL and update was successful. Later I did the update in QA with openSSL and again the updte was successfully completed. Apache services was running fine and everything looked nice.
When I did the same update in the prd where openSSL is also there, it failed to start the service.
steps to update the apache from 2.4.6 to 2.4.9 ---------------------------------------------- 1> stop the apache services 2> Take the backup by copying original Apache installation directory and rename it . (eg I:Program Files (x86)Apache Software FoundationApache2.2 to Apache2.2_old) 3> Unzip the latest binaries to the temp directory 4> Copy the following files apachebin , apachemodules to the Apache Inst Directory ( I:Program Files (x86)Apache Software FoundationApache2.2) 5> start the apache service ----------------------------------------------------
QA and PRD both has enabled openSSL but it was prd where we got the issue , and the apache services couldnt be started. We have had to revert the change. Find the error log in the apache directory
--------------------------
[Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] AH02561: Failed to configure certificate
RGWEB58V.brotherdc.eu:443:0, check G:/Program Files (x86)/Apache Software Foundation/Apache2.2/conf/server.crt [Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:0906D06C:PEM routines:PEM_read_bio:no start line (Expecting: CERTIFICATE) -- Bad file contents or format - or even just a forgotten SSLCertificateKeyFile? [Tue Jun 24 21:12:12.665632 2014] [ssl:emerg] [pid 3336:tid 320] SSL Library Error: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib
---------------------------------------
I read somewhere that there is bug in 2.4.9 as this version breaks the openSSL.
Also read on this forum that someone resolved the issu by changing the server certificate from DER to PEM.
Today I upgraded my dual opteron dedicated server from a 10mbps port to 100mbps. While the number of apache access have dropped by about a quarter my CPU usage has increased also by about a quarter, my CPU is touching on 95-100% now.
What’s most likely to be the cause?
What’s also interesting is my network port is only showing 20mbps usage, nowhere near the 100mbps its been upgraded to.
I'm familiar with shared hosting but a complete novice to virtual servers, I'm getting the following error message when I go to my new virtual server IP [url]
If you see this page it means:
1. hosting for this domain is not configured
or
2. there's no such domain registered in Parallels Plesk Control Panel
Now am I getting that because...
a) I need to set something up in the PLESK control panel thing or
b) Is it a DNS issue? Its only been 30 hours since the migration from shared hosting.
I was told when I upgraded that I wouldn't have to do anything and there would be no interruption as the site www.mydomain.com would continue to use the shared hosting until the virtual one was set.
Is it a question of waiting for the DNS to update so it points to [url]: or do I have to set something up?
I'm trying to connect to the server via SFTP but when I check the box to do that in Total Commanders settings box it says I need the OpenSSL dll's. I downloaded the must current file from [url] but I can't find any dll files in it and I'm unsure how to proceed.
We're having problems with the Roundcube webmail spell check, and upon checking the log we get the error 'Unable to find the socket transport SSL'. From what I can find out this is normally due to Open SSL not being enabled, but it is, you can check our php config here.
I upgraded today from 11 to 12, however since the upgrade I am now unable to start the PSA Service, it comes up with the below error.
Starting psa... Starting sw-engine-fpm: Thu Jun 19 13:22:29 2014 (7885): Fatal Error Unable to allocate shared memory segment of 104857600 bytes: mmap: Cannot allocate memory (12)
I have checked resources and everything should be fine, I cant see a reason why it cant allocate the memory, as there is plenty free for it to take from.
I have tried a Bootstrapper repair for 12 however this has not found any issues other than its not able to stop the PSA Service (As its not running)
Everything else is up and running its just the Parallels backend which im guessing is what the PSA Service is!
I updated two days ago the Plesk panel from the Panel itself and it was succesfully but at webmail URL which it appeared one error about default.inc something but after I did refresh some times it disappeared now it doesn't show anything. I tried removing and reinstalling roundcube but still doesn't work..
Here are my logs from /var/log/plesk-roundcube/errors [09-Apr-2015 14:50:36 UTC] PHP Warning: finfo_file(/usr/share/psa-roundcube/installer/images/roundcube_logo.png): failed to open stream: No such file or directory in /usr/share/psa-roundcube/program/lib/Roundcube/rcube_mime.php on line$n line 754
I am trying to put together a 1U server, and this is the first time I've had to deal with the space constraints of a rackmount server.
I am toying with a RAID 10 setup, which requires 4 drives, so I am looking at 2.5" enterprise drives so that I can fit 4 into a 1U rack. The problem is I was on newegg and don't see any cases with 2.5" bays. Are there kits that convert 3.5" bays to 2x2.5" or something of this nature? Furthermore, I see here:http://www.newegg.com/Product/Produc...82E16822136260
that the 2.5" drive is inside a 3.5" brick. Can this be taken out of the mount? I don't see the point in paying extra for a 2.5" drive that only fits in a 3.5" slot.
I have read that in a 4-drive array, RAID 10 outperforms RAID 5. This seems counterintuitive to me because in RAID 5 there is essentially striping across 3 drives, and then parity on the 4th, whereas in 10, you would only have striping across 2 drives. Is this just because of the calculations involved in generating the parity?
I have been trying to get it to work for 3 days now, and just not having any luck at all. When I plug it in, the PSU fan comes on, and the green light on the motherboard flashes on and off. I have made sure all the connections on it are correct (to the best of my knowledge anyways, the manuals are ****) and it will not boot up.
This leads me to believe that either something is dead, or that the RAM is incorrect. All the parts I have were suggested by cwl@apaqdigital, so I assume they all will work together, but I need some help fast. Todays the last day I can RMA them to newegg.
this RAM isnt going to work. It was suggested, but after spending 3 days looking, thats all I can think of. It looks like this mobo only supports ECC Registered or ECC Unbuffered.
I have build PHP as CGI but now the function exec says with every command like uptime this error: [Thu Apr 16 10:28:37 2009] [error] [client xxx.xxx.xxx.xxx] sh: uptime: command not found
This also happens when I do the command convert (yes Imagemagick is installed). Strange enough when I login with the permissions of the exame user I can do the commands through SSH without any problem.
I use DirectAdmin with custombuild. How can I resolve this? Am I required to build PHP to CLI to use the exec command?
I am making some business plans and having an independent datacenter is one of them. Certainly it isn't easy as leasing a space, and buy some stuff. Some of the things I have to watch out for are network activity, getting bandwidth support, power supply, get an engineering company to design the facility and a lot of stuff.
Are there any companies who handles all that? What would be the specific steps to accomplish my agenda?
when you purchase your server, do you usually purchase a branded server such as Dell, HP, IBM, etc or do go and buy each component, and build it yourself?
Is there some sort of checklist of all programs and settings that should take place when building a new web server? I am outsourcing a server build to a new consultant and I know that basics of what needs to be installed but I am sure I am missing a few things, most importantly security issues.
Does anyone have an input on this or links that I might find useful?
Here is what I know needs to be built: Free BSD Apache 2 PHP 5 Mysql 5 cPanel
I am wondering does anyone know of either a program/software, and/or script that will auto build a dedicated server? For example, someone purchase my product as soon as it is verified than it starts the building process and builds the server to what they asked for, partitioning, etc.?
I received a chassis from SuperMicro today. It came with a translucent thin piece of plastic (about as thin as a piece of paper). The plastic has holes cut out that are roughly the same as the holes in the mother board. What is this thing? Is it just a guide so you know where to put the mounting screws?