Join the community today
Register Now

Beta Branch add check_php_cainfo_file function in 123.09beta01

Discussion in 'Centmin Mod Github Commits' started by eva2000, Oct 3, 2021.

  1. eva2000

    eva2000 Administrator Staff Member

    47,292
    10,703
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +16,628
    Local Time:
    3:05 PM
    Nginx 1.19.x
    MariaDB 5.5/10.x
    add check_php_cainfo_file function in 123.09beta01

    - Update download url for cacert.pem downloaded at https://curl.se/docs/caextract.html and saved at /etc/ssl/certs/cacert.pem and used for PHP CA Trust bundle via curl.cainfo PHP directive referenced in /etc/centminmod/php.d/curlcainfo.ini PHP settings file for PHP 7+ & PHP 8
    - Add check_php_cainfo_file function to inc/cpcheck.inc to run on centmin.sh runs to check if downloaded /etc/ssl/certs/cacert.pem file is older than 90 days and if older, download an updated cacert.pem file. Latest updated cacert.pem file dated September 30, 2021 has removed the Letsencrypt DST Root CA X3 expired certificate from it's bundle of trusted CAs as outlined at https://blog.centminmod.com/2021/10...oot-ca-x3-certificate-expiration-on-centos-7/
    - This check was already done whenever someone runs centmin.sh menu option 5 to upgrade or recompile PHP. This update just adds an additional check at centmin.sh menu runtime.
    - Existing users can update by running cmupdate command and then running and exiting once from centmin.sh menu

    Continue reading...


    123.09beta01 branch