Upgrade PHP-FPM Centmin Mod .09 beta branch Testing

eva2000 · Jan 26, 2016

ModeltogTossen said: ↑

is the way outlined by @eva2000 here - https://community.centminmod.com/posts/17469/ - still the correct way to fetch/install a newer python?
Click to expand...

yup correct for centos 6.x use addons/python27_install.sh addon at https://community.centminmod.com/posts/17469/

ModeltogTossen said: ↑

If yes - and after install/upgrade of python - would it be better to look at the borg backup counterpart instead of attic. Borg should be a little more active in development.
Click to expand...

better asked in appropriate thread at Beta Branch - Centmin Mod Backups - Attic Deduplication Backups | Centmin Mod Community

eva2000 · Jan 27, 2016

Nginx 1.9.10 Security Fixes

Updated both Centmin Mod 123.08stable and 123.09beta01 builds to default to Nginx 1.9.10 for security fixes CVE-2016-0742, CVE-2016-0746, and CVE-2016-0747. You can update your existing Centmin Mod Nginx server via centmin.sh menu option 4.

Code:

--------------------------------------------------------
Centmin Mod 1.2.3-eva2000.08 - http://centminmod.com
--------------------------------------------------------
                   Centmin Mod Menu                  
--------------------------------------------------------
1).  Centmin Install
2).  Add Nginx vhost domain
3).  NSD setup domain name DNS
4).  Nginx Upgrade / Downgrade
5).  PHP Upgrade / Downgrade
6).  XCache Re-install
7).  APC Cache Re-install
8).  XCache Install
9).  APC Cache Install
10). Memcached Server Re-install
11). MariaDB 5.2/5.5 & 10.x Upgrade Sub-Menu
12). Zend OpCache Install/Re-install
13). Install ioping.sh vbtechsupport.com/1239/
14). SELinux disable
15). Install/Reinstall ImagicK PHP Extension
16). Change SSHD Port Number
17). Multi-thread compression: pigz,pbzip2,lbzip2...
18). Suhosin PHP Extension install
19). Install FFMPEG and FFMPEG PHP Extension
20). NSD Re-install
21). Update - Nginx + PHP-FPM + Siege
22). Add Wordpress Nginx vhost + WP Super Cache
23). Update Centmin Mod Code Base
24). Exit
--------------------------------------------------------
Enter option [ 1 - 24 ] 4
--------------------------------------------------------

Code:

Do you want to run YUM install checks ?  [y/n]

This will increase your upgrade duration time wise.
Check the change log centminmod.com/changelog.html
to see if any Nginx or PHP related new additions
which require checking YUM prequisites are met.
If no new additions made, you can skip the
YUM install check to speed up upgrade time.

[y/n]: n
**********************************************************************
* Nginx Update script - Included in Centmin Extras
* Version: 1.2.3-eva2000.08 - Date: 30/04/2016 - Copyright 2011-2016 CentminMod.com
**********************************************************************
This software comes with no warranty of any kind. You are free to use
it for both personal and commercial use as licensed under the GPL.
Nginx Upgrade - Would you like to continue? [y/n] y

Install which version of Nginx? (version i.e. 1.9.10}): 1.9.10

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

eva2000 · Jan 27, 2016

centmin.sh menu option 22 updated

move centmin.sh menu option 22 wordpress generated include files from /usr/local/nginx/conf to their own specific directories at /usr/local/nginx/conf/wpincludes/$vhostname directory as per discussion at https://community.centminmod.com/posts/24896/

example for centmin.sh menu option 22 wordpress install for newdomain2.com

Code:

ls -lah /usr/local/nginx/conf/wpincludes/newdomain2.com/
total 24K
drwxr-x--- 2 root root 4.0K Jan 27 00:06 .
drwxr-x--- 3 root root 4.0K Jan 27 00:06 ..
-rw-r--r-- 1 root root 1009 Jan 27 00:06 rediscache_newdomain2.com.conf
-rw-r--r-- 1 root root 1.2K Jan 27 00:06 wpcacheenabler_newdomain2.com.conf
-rw-r--r-- 1 root root 1.1K Jan 27 00:06 wpsecure_newdomain2.com.conf
-rw-r--r-- 1 root root  489 Jan 27 00:06 wpsupercache_newdomain2.com.conf

vhost contents /usr/local/nginx/conf/conf.d/newdomain2.com.conf

Code:

# Centmin Mod Getting Started Guide
# must read http://centminmod.com/getstarted.html

# redirect from non-www to www
# uncomment, save file and restart Nginx to enable
# if unsure use return 302 before using return 301
#server {
#            listen   80;
#            server_name newdomain2.com;
#            return 301 $scheme://www.newdomain2.com$request_uri;
#       }

server {
 
  server_name newdomain2.com www.newdomain2.com;

# ngx_pagespeed & ngx_pagespeed handler
#include /usr/local/nginx/conf/pagespeed.conf;
#include /usr/local/nginx/conf/pagespeedhandler.conf;
#include /usr/local/nginx/conf/pagespeedstatslog.conf;

  # limit_conn limit_per_ip 16;
  # ssi  on;

  access_log /home/nginx/domains/newdomain2.com/log/access.log combined buffer=256k flush=60m;
  error_log /home/nginx/domains/newdomain2.com/log/error.log;

  root /home/nginx/domains/newdomain2.com/public;

  include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpcacheenabler_newdomain2.com.conf;
  #include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpsupercache_newdomain2.com.conf;
  # https://community.centminmod.com/posts/18828/
  #include /usr/local/nginx/conf/wpincludes/newdomain2.com/rediscache_newdomain2.com.conf; 

  location / {
 

  # Enables directory listings when index file not found
  #autoindex  on;

  # for wordpress super cache plugin
  #try_files /wp-content/cache/supercache/$http_host/$cache_uri/index.html $uri $uri/ /index.php?q=$uri&$args;

  # for wp cache enabler plugin
  try_files $cache_enabler_uri $uri $uri/ $custom_subdir/index.php?$args;  

  # Wordpress Permalinks
  #try_files $uri $uri/ /index.php?q=$uri&$args;

  # Nginx level redis Wordpress
  # https://community.centminmod.com/posts/18828/
  #try_files $uri $uri/ /index.php?$args;

  }

location ~* /(wp-login\.php) {
    limit_req zone=xwplogin burst=1 nodelay;
    #limit_conn xwpconlimit 30;
    #auth_basic "Private";
    #auth_basic_user_file /home/nginx/domains/newdomain2.com/htpasswd_wplogin; 
    include /usr/local/nginx/conf/php-wpsc.conf;
    # https://community.centminmod.com/posts/18828/
    #include /usr/local/nginx/conf/php-rediscache.conf;
}

location ~* /(xmlrpc\.php) {
    limit_req zone=xwprpc burst=45 nodelay;
    #limit_conn xwpconlimit 30;
    include /usr/local/nginx/conf/php-wpsc.conf;
    # https://community.centminmod.com/posts/18828/
    #include /usr/local/nginx/conf/php-rediscache.conf;
}

  include /usr/local/nginx/conf/wpincludes/newdomain2.com/wpsecure_newdomain2.com.conf;
  include /usr/local/nginx/conf/php-wpsc.conf;
  # https://community.centminmod.com/posts/18828/
  #include /usr/local/nginx/conf/php-rediscache.conf;
  include /usr/local/nginx/conf/staticfiles.conf;
  include /usr/local/nginx/conf/drop.conf;
  #include /usr/local/nginx/conf/errorpage.conf;
  include /usr/local/nginx/conf/vts_server.conf;
}

rdan · Jan 27, 2016

Updated mine, Thanks!
Using latest 09beta.

Code:

]# nginx -V
nginx version: nginx/1.9.10
built by clang 3.4.2 (tags/RELEASE_34/dot2-final)
built with LibreSSL 2.2.5
TLS SNI support enabled
configure arguments: 
--with-ld-opt='-lrt -ljemalloc -Wl,-z,relro' 
--with-cc-opt='-m64 -mtune=native -mfpmath=sse -g -O2 -fstack-protector 
--param=ssp-buffer-size=4 -Wformat -Werror=format-security -Wp,-D_FORTIFY_SOURCE=2 -Wno-sign-compare -Wno-string-plus-int -Wno-deprecated-declarations -Wno-unused-parameter -Wno-unused-const-variable -Wno-conditional-uninitialized -Wno-mismatched-tags -Wno-c++11-extensions -Wno-sometimes-uninitialized -Wno-parentheses-equality -Wno-tautological-compare -Wno-self-assign -Wno-deprecated-register -Wno-deprecated -Wno-invalid-source-encoding -Wno-pointer-sign -Wno-parentheses -Wno-enum-conversion' 
--sbin-path=/usr/local/sbin/nginx 
--conf-path=/usr/local/nginx/conf/nginx.conf 
--with-http_ssl_module 
--with-http_v2_module 
--with-http_gzip_static_module 
--with-http_realip_module 
--with-openssl-opt=enable-tlsext 
--with-openssl=../libressl-2.2.5 
--with-libatomic 
--with-pcre=../pcre-8.38 
--with-pcre-jit

ModeltogTossen · Jan 27, 2016

eva2000 said: ↑

123.09beta01 builds to default to Nginx 1.9.10 for security fixes
Click to expand...

My production live 09beta01 is updated - thanks @eva2000 for the update.

Matt · Jan 27, 2016

@eva2000

Just noticed a little mistake in the output of the default nginx version
Code:
Install which version of Nginx? (version i.e. 1.9.10})
Additional curly bracket on the end.

eva2000 · Jan 27, 2016

cheers @Matt @ModeltogTossen

Also updated download routine for 123.09beta01 for LibreSSL download to geo location map to provided mirrors Getting OpenBSD - should speed up LibreSSL downloads

commit Implement geo location mapping for LibreSSL downloads · centminmod/[email protected] · GitHub

eva2000 · Jan 27, 2016

Re-enabled FFMPEG network support in centmin.sh menu option 19 installer for FFMPEG and FFMPEG PHP extension https://community.centminmod.com/posts/24965/

ModeltogTossen · Jan 28, 2016

I got the compile to this state and all get havoc..

Code:

creating libtool
appending configuration tag "CXX" to libtool
checking whether the ccache g++ linker (/bin/ld -m elf_x86_64) supports shared libraries... yes
checking for ccache g++ option to produce PIC...
checking if ccache g++ static flag  works... yes
checking if ccache g++ supports -c -o file.o... yes
checking whether the ccache g++ linker (/bin/ld -m elf_x86_64) supports shared libraries... yes
checking dynamic linker characteristics... GNU/Linux ld.so
(cached) (cached) checking how to hardcode library paths into programs... unsupported
configure: creating ./config.status
config.status: creating config.h
/bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc  -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib  -I/opt/ffmpeg/include -DHAVE_CONFIG_H  -g -O2   -c /svr-setup/ffmpeg-php-git/ffmpeg-php.c -o ffmpeg-php.lo
/bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc  -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib  -I/opt/ffmpeg/include -DHAVE_CONFIG_H  -g -O2   -c /svr-setup/ffmpeg-php-git/ffmpeg_movie.c -o ffmpeg_movie.lo
/bin/sh /svr-setup/ffmpeg-php-git/libtool --mode=compile ccache gcc  -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib  -I/opt/ffmpeg/include -DHAVE_CONFIG_H  -g -O2   -c /svr-setup/ffmpeg-php-git/ffmpeg_frame.c -o ffmpeg_frame.lo
mkdir .libs
ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg_movie.c  -fPIC -DPIC -o .libs/ffmpeg_movie.o
ccache gcc -I. -I/svr-setup/ffmpeg-php-git -DPHP_ATOM_INC -I/svr-setup/ffmpeg-php-git/include -I/svr-setup/ffmpeg-php-git/main -I/svr-setup/ffmpeg-php-git -I/usr/local/include/php -I/usr/local/include/php/main -I/usr/local/include/php/TSRM -I/usr/local/include/php/Zend -I/usr/local/include/php/ext -I/usr/local/include/php/ext/date/lib -I/opt/ffmpeg/include -DHAVE_CONFIG_H -g -O2 -c /svr-setup/ffmpeg-php-git/ffmpeg-php.c  -fPIC -DPIC -o .libs/ffmpeg-php.o
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘zim_ffmpeg_movie___construct’:
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:298:9: error: unknown type name ‘zend_rsrc_list_entry’
         zend_rsrc_list_entry *le;
         ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:307:9: warning: passing argument 2 of ‘zend_hash_find’ from incompatible pointer type [enabled by default]
         if (SUCCESS == zend_hash_find(&EG(persistent_list), hashkey, hashkey_length+1, (void**)&le)) {
         ^
In file included from /usr/local/include/php/Zend/zend.h:36:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_hash.h:154:30: note: expected ‘struct zend_string *’ but argument is of type ‘char *’
ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key);
                              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:307:9: error: too many arguments to function ‘zend_hash_find’
         if (SUCCESS == zend_hash_find(&EG(persistent_list), hashkey, hashkey_length+1, (void**)&le)) {
         ^
In file included from /usr/local/include/php/Zend/zend.h:36:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_hash.h:154:30: note: declared here
ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key);
                              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:310:13: warning: passing argument 1 of ‘zval_get_type’ from incompatible pointer type [enabled by default]
             if (Z_TYPE_P(le) != le_ffmpeg_pmovie) {
             ^
In file included from /usr/local/include/php/Zend/zend.h:31:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_types.h:326:38: note: expected ‘const struct zval *’ but argument is of type ‘int *’
static zend_always_inline zend_uchar zval_get_type(const zval* pz) {
                                      ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:315:48: error: request for member ‘ptr’ in something not a structure or union
             ffmovie_ctx = (ff_movie_context*)le->ptr;
                                                ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:319:61: warning: comparison between pointer and integer [enabled by default]
             if (zend_list_find(ffmovie_ctx->rsrc_id, &type) == ffmovie_ctx) {
                                                             ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:330:13: error: unknown type name ‘zend_rsrc_list_entry’
             zend_rsrc_list_entry new_le;
             ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:339:13: warning: passing argument 1 of ‘zval_get_type’ from incompatible pointer type [enabled by default]
             Z_TYPE(new_le) = le_ffmpeg_pmovie;
             ^
In file included from /usr/local/include/php/Zend/zend.h:31:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_types.h:326:38: note: expected ‘const struct zval *’ but argument is of type ‘int *’
static zend_always_inline zend_uchar zval_get_type(const zval* pz) {
                                      ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:339:28: error: lvalue required as left operand of assignment
             Z_TYPE(new_le) = le_ffmpeg_pmovie;
                            ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:340:19: error: request for member ‘ptr’ in something not a structure or union
             new_le.ptr = ffmovie_ctx;
                   ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:344:29: error: macro "zend_hash_update" passed 6 arguments, but takes just 3
                         NULL)) {
                             ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:342:28: error: ‘zend_hash_update’ undeclared (first use in this function)
             if (FAILURE == zend_hash_update(&EG(persistent_list), hashkey,
                            ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:342:28: note: each undeclared identifier is reported only once for each function it appears in
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:367:5: warning: passing argument 4 of ‘add_property_resource_ex’ makes pointer from integer without a cast [enabled by default]
     add_property_resource(getThis(), "ffmpeg_movie", ffmovie_ctx->rsrc_id);
     ^
In file included from /usr/local/include/php/main/php.h:39:0,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_API.h:453:14: note: expected ‘struct zend_resource *’ but argument is of type ‘long int’
ZEND_API int add_property_resource_ex(zval *arg, const char *key, size_t key_len, zend_resource *r);
              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c: At top level:
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:381:36: error: unknown type name ‘zend_rsrc_list_entry’
static void _php_free_ffmpeg_movie(zend_rsrc_list_entry *rsrc TSRMLS_DC)
                                    ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:404:37: error: unknown type name ‘zend_rsrc_list_entry’
static void _php_free_ffmpeg_pmovie(zend_rsrc_list_entry *rsrc TSRMLS_DC)
                                     ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘register_ffmpeg_movie_class’:
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:432:57: error: ‘_php_free_ffmpeg_movie’ undeclared (first use in this function)
     le_ffmpeg_movie = zend_register_list_destructors_ex(_php_free_ffmpeg_movie,
                                                         ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:436:13: error: ‘_php_free_ffmpeg_pmovie’ undeclared (first use in this function)
             _php_free_ffmpeg_pmovie, "ffmpeg_pmovie", module_number);
             ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c: In function ‘php_get_dict_value’:
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: warning: passing argument 2 of ‘zend_hash_find’ from incompatible pointer type [enabled by default]
     GET_MOVIE_RESOURCE(ffmovie_ctx);
     ^
In file included from /usr/local/include/php/Zend/zend.h:36:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_hash.h:154:30: note: expected ‘struct zend_string *’ but argument is of type ‘char *’
ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key);
                              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: error: too many arguments to function ‘zend_hash_find’
     GET_MOVIE_RESOURCE(ffmovie_ctx);
     ^
In file included from /usr/local/include/php/Zend/zend.h:36:0,
                 from /usr/local/include/php/main/php.h:35,
                 from /svr-setup/ffmpeg-php-git/ffmpeg_movie.c:36:
/usr/local/include/php/Zend/zend_hash.h:154:30: note: declared here
ZEND_API zval* ZEND_FASTCALL zend_hash_find(const HashTable *ht, zend_string *key);
                              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:56:62: warning: comparison between pointer and integer [enabled by default]
                 sizeof("ffmpeg_movie"), (void **)&_tmp_zval) == FAILURE) {\
                                                              ^
/svr-setup/ffmpeg-php-git/ffmpeg_movie.c:507:5: note: in expansion of macro ‘GET_MOVIE_RESOURCE’
     GET_MOVIE_RESOURCE(ffmovie_ctx);

And alot more of those ..

Updated branch to include your latest update on this - but still same stuff like above.. Have all delete/cleared the /opt/bin|ffmpeg|ffmpeg_sources and also the deleted the /svr-setup/ffmpeg-php-git before I tried again - with the very same issues.

What is the best way from here to continue trying to fix this?

eva2000 · Jan 28, 2016

what version of PHP ? not sure if it works with PHP 7 you using 123.09beta01 branch ? which menu options you ran ?

ModeltogTossen · Jan 28, 2016

eva2000 said: ↑

what version of PHP ? not sure if it works with PHP 7
Click to expand...

Okay - thats the issues then.. I'm on 7.0.2

eva2000 · Jan 28, 2016

Github & Gitlab Centmin Mod Repositories

In light of current Github.com site downtime, I am posting more detailed info for Centmin Mod's Github and Gitlab backup Git repositories that Centmin Mod folks can use. Full details can be read in sticky thread in Git Commit forums Centmin Mod Git Repository Online Status | Centmin Mod Community

Alot of Centmin Mod users and myself rely on the access to the Git hosted Centmin Mod code with currently 60-80 new Centmin Mod installations per day ! So it's always good to have backups for everything and Gitlab serves as a backup to Github for Centmin Mod.

eva2000 · Jan 28, 2016

addons/customcurl.sh updated

Updated optional addons/customcurl.sh to Curl 7.47 outlined at https://community.centminmod.com/posts/25009/

eva2000 · Jan 29, 2016

Updated 123.09beta01 to backup Centmin Mod created cronjobs backup centmin mod setup cronjobs to cronjoblist files · centminmod/[email protected] · GitHub

For tools/cminfo.sh, tools/nvwp.sh and inc/wpsetup.inc the auto generated and setup cronjobs i.e. centmin.sh menu option 22 for wp-cron.php and wp_updater script are backed up to their own directory file at /home/nginx/domains/${vhostname}/cronjobs/*.txt text based files for before and after auto setup of cronjobs so you have a reference to them if you need them in future. For tools/cminfo.sh it's backed up to /etc/centminmod/cronjobs/*.txt text files.
Click to expand...

eva2000 · Jan 29, 2016

OpenSSL 1.0.2f & LibreSSL 2.2.6 Updates for Centmin Mod Nginx

OpenSSL 1.0.2f is out Security - OpenSSL 1.0.2f & Updating Centmin Mod Nginx SSL Support

LibreSSL 2.2.6 is out Security - LibreSSL 2.2.6 Security Fix Release | Centmin Mod Community

Updated both Centmin Mod 123.08stable and 123.09beta01 builds for OpenSSL 1.0.2f and LibreSSL 2.2.6 release for Centmin Mod Nginx folks who may use OpenSSL 1.0.2 (123.08stable and higher default to using LibreSSL instead of OpenSSL, unless you use Phusion Passenger addon which reverts Centmin Mod Nginx back from LibreSSL to OpenSSL 1.0.2).

Important

Centmin Mod Nginx needs recompiling for using OpenSSL 1.0.2f or LibreSSL 2.2.6. To update Centmin Mod Nginx, read instructions here or below.

http://openssl.org/news/secadv/20160128.txt

CVE-2016-0701 - Red Hat Customer Portal

CVE-2015-3197 - Red Hat Customer Portal

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

Centmin Mod 1.2.3-eva2000.08 stable install & update thread

Centmin Mod 123.09beta thread

Upgrading Centmin Mod Code to Latest Version

Upgrading Centmin Mod involves 2 parts.
Upgrading the actual Centmin Mod code outlined at Upgrade Centmin Mod - CentminMod.com LEMP Nginx web stack for CentOS This is heart of Centmin Mod where the code is the engine that runs centmin.sh shell based menu and all the automation you're accustomed to.
Upgrade software that Centmin Mod installed or manages. For this part following outline at Upgrade - How to upgrade Centmin Mod. In this case after updating Centmin Mod code, read instructions here and run centmin.sh menu option 4 to recompile Nginx which already has centmin.sh variable updated to 1.0.2f
Code:
OPENSSL_VERSION='1.0.2f'
and
Code:
LIBRESSL_VERSION='2.2.6'

eva2000 · Jan 29, 2016

FYI, just updated 123.09beta01 with mirror checking routine for LibreSSL so if the mirror url doesn't have the LibreSSL version populated it will fall back to main download link.

Example, My Virtualbox server located in Australia detected AU mirror but fellback to main USA download link as Australian mirror doesn't have the LibreSSL version
Code:
AU server detected
Download libressl-2.2.6.tar.gz ...
Initializing download: http://ftp.openbsd.org/pub/OpenBSD/LibreSSL/libressl-2.2.6.tar.gz
File size: 2965531 bytes
Opening output file libressl-2.2.6.tar.gz
Starting download

Connection 2 finished                                                          ]
Connection 3 finished                                                          ]
Connection 1 finished                                                          ]
Connection 0 finished                                                          ]

Downloaded 2.8 Megabyte in 4 seconds. (602.36 KB/s)
Download done.
libressl-2.2.6.tar.gz valid file.

eva2000 · Jan 29, 2016

Updated 123.09beta01 to add Cloudflare's chacha20_poly1305 patch for OpenSSL 1.0.2f Beta Branch - update OpenSSL 1.0.2 Cloudflare patch for chacha20_poly1305 support | Centmin Mod Community Nginx defaults to LibreSSL 2.2 which already has native chacha20_poly1305 support. However, if you set LIBRESSL_SWITCH='n' in centmin.sh, then Nginx uses OpenSSL 1.0.2f which out of box doesn't support chacha20_poly1305 unless you also set CLOUDFLARE_PATCHSSL='y' before centmin.sh menu option 4 recompile of Nginx.

Using Nginx with OpenSSL 1.0.2f patched with Cloudflare chacha20 patch requires these 2 settings set preferably in persistent config file at /etc/centminmod/custom_config.inc or in centmin.sh alterations.
Code:
CLOUDFLARE_PATCHSSL='y'
LIBRESSL_SWITCH='n'
Note Centmin Mod Nginx will always default to LibreSSL as opposed to using OpenSSL 1.0.2 where possible as outlined at SSL - Nginx and LibreSSL alternative to OpenSSL | Centmin Mod Community

You can see the supported SSL cipher list for OpenSSL 1.0.2f patched vs LibreSSL 2.2.6 vs system OpenSSL 1.0.1e here https://community.centminmod.com/posts/25069/

eva2000 · Feb 3, 2016

Updated 123.09beta01 with new security headers in default nginx http and https vhost templates Beta Branch - update nginx vhost templates. Commented out by default.

Also updated the official vhost generator with same template additions for these additional security headers at centminmod.com/vhost.php.

eva2000 · Feb 4, 2016

centmin.sh menu option 22 update

Updated both Centmin Mod 123.08stable and 123.09beta01 build's centmin.sh menu option 22 wordpress auto installer routine in inc/wpsetup.inc to pre-whitelist common and popular Wordpress plugins.

Update wpsecure_${vhostname}.conf include file to whilelist most popular and common wordpress plugins which need to run php within plugins directory otherwise their php execution will be blocked by centmin.sh menu option 22's wordpress auto installer /usr/local/nginx/conf/wpincludes/wpsecure_${vhostname}.conf generated includes file

Centmin Mod 123.09beta01 commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/[email protected] · GitHub

Centmin Mod 123.08stable commit update inc/wpsetup.inc pre-whitelist wp plugins · centminmod/[email protected] · GitHub

To update your Centmin Mod builds follow instructions at centminmod.com/upgrade.html and respective version threads below:

Centmin Mod 1.2.3-eva2000.08 stable install & update thread

Centmin Mod 123.09beta thread

eva2000 · Feb 5, 2016

Moved innodbio.sh testing to own thread at Beta Branch - Help test innodbio.sh for MySQL Tuning | Centmin Mod Community

Log in / Register

Forums

Learn about Centmin Mod LEMP Stack today

Upgrade PHP-FPM Centmin Mod .09 beta branch Testing

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Nginx 1.9.10 Security Fixes

eva2000 Administrator Staff Member

centmin.sh menu option 22 updated

rdan Well-Known Member

ModeltogTossen I wish I could??

Matt Moderator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

ModeltogTossen I wish I could??

eva2000 Administrator Staff Member

ModeltogTossen I wish I could??

eva2000 Administrator Staff Member

Github & Gitlab Centmin Mod Repositories

eva2000 Administrator Staff Member

addons/customcurl.sh updated

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

OpenSSL 1.0.2f & LibreSSL 2.2.6 Updates for Centmin Mod Nginx

Upgrading Centmin Mod Code to Latest Version

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

centmin.sh menu option 22 update

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Learn about Centmin Mod LEMP Stack today

Upgrade PHP-FPM Centmin Mod .09 beta branch Testing

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Nginx 1.9.10 Security Fixes

eva2000 Administrator Staff Member

centmin.sh menu option 22 updated

rdan Well-Known Member

ModeltogTossen I wish I could??

Matt Moderator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

ModeltogTossen I wish I could??

eva2000 Administrator Staff Member

ModeltogTossen I wish I could??

eva2000 Administrator Staff Member

Github & Gitlab Centmin Mod Repositories

eva2000 Administrator Staff Member

addons/customcurl.sh updated

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

OpenSSL 1.0.2f & LibreSSL 2.2.6 Updates for Centmin Mod Nginx

Upgrading Centmin Mod Code to Latest Version

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

centmin.sh menu option 22 update

eva2000 Administrator Staff Member

.