Learn about Centmin Mod LEMP Stack today
Become a Member

CentOS 7.x Rolling back Axivo installed OpenSSL 1.0.2a

Discussion in 'CentOS, Redhat & Oracle Linux News' started by Sunka, Mar 3, 2016.

  1. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:16 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    After rebooting I get 502 Bad Gateway on webpage but I can login into SSH
    I did not recompile nginx yet, just did reboot after upgrading openssl

     
  2. eva2000

    eva2000 Administrator Staff Member

    54,884
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    3:16 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    If you updated centmin mod code first, OPENSSL_VERSION is already set to 1.0.2g so just centmin.sh menu option 4 recompile is needed
     
  3. eva2000

    eva2000 Administrator Staff Member

    54,884
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    3:16 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    is php-fpm running ?
     
  4. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:16 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    Code:
    [root@tvor-ocean /]# nprestart
    Restarting nginx (via systemctl):                          [  OK  ]
    Gracefully shutting down php-fpm kill: usage: kill [-s sigspec | -n signum | -sigspec] pid | jobspec ... or kill -l [sigspec]
    ................................... failed. Use force-exit
    Starting php-fpm /usr/local/sbin/php-fpm: /lib64/libcrypto.so.10: version `OPENSSL_1.0.2' not found (required by /usr/local/sbin/php-fpm)
    failed
     
  5. eva2000

    eva2000 Administrator Staff Member

    54,884
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    3:16 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    ah recompile php via centmin.sh menu option 5 as it's tied to openssl 1.0.2a axivo version
     
  6. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:16 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    OK, then update centmin (23 + 2 + 4)
    then run again centmin and recompile nginx to same version?
     
  7. eva2000

    eva2000 Administrator Staff Member

    54,884
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    3:16 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    yup
     
  8. Sunka

    Sunka Well-Known Member

    1,150
    325
    83
    Oct 31, 2015
    Pula, Croatia
    Ratings:
    +525
    Local Time:
    6:16 PM
    Nginx 1.17.9
    MariaDB 10.3.22
    Updated open ssl
    Recompiled php 7.0.3
    Recompiled nginx 1.9.12

    Now all we are waiting for is @eva2000's fix for libressl and nginx 1.9.12 and beyond :)
    Looking all well, as far as I understand...
    Code:
    le --with-http_v2_module --with-openssl=../openssl-1.0.2g
    [root@tvor-ocean ~]# php -v
    PHP 7.0.3 (cli) (built: Mar  3 2016 05:02:02) ( NTS )
    Copyright (c) 1997-2016 The PHP Group
    Zend Engine v3.0.0, Copyright (c) 1998-2016 Zend Technologies
        with Zend OPcache v7.0.6-dev, Copyright (c) 1999-2016, by Zend Technologies
    Code:
    [root@tvor-ocean ~]# php -m
    [PHP Modules]
    bcmath
    bz2
    calendar
    Core
    ctype
    curl
    date
    dom
    enchant
    exif
    filter
    ftp
    gd
    geoip
    gettext
    gmp
    hash
    iconv
    imagick
    imap
    intl
    json
    libxml
    mailparse
    mbstring
    mcrypt
    mysqli
    mysqlnd
    openssl
    pcntl
    pcre
    PDO
    pdo_mysql
    pdo_sqlite
    Phar
    posix
    pspell
    readline
    redis
    Reflection
    session
    shmop
    SimpleXML
    snmp
    soap
    sockets
    SPL
    sqlite3
    ssh2
    standard
    sysvmsg
    sysvsem
    sysvshm
    tidy
    tokenizer
    xml
    xmlreader
    xmlrpc
    xmlwriter
    xsl
    Zend OPcache
    zip
    zlib
    
    [Zend Modules]
    Zend OPcache
    Code:
    [root@tvor-ocean ~]# php --ri redis
    
    redis
    
    Redis Support => enabled
    Redis Version => 2.2.8-devphp7
     
  9. eva2000

    eva2000 Administrator Staff Member

    54,884
    12,240
    113
    May 24, 2014
    Brisbane, Australia
    Ratings:
    +18,811
    Local Time:
    3:16 AM
    Nginx 1.27.x
    MariaDB 10.x/11.4+
    Looking good there :D