Web Hosting Forum | Lunarpages

Author Topic: Upgrading OpenSSL  (Read 14314 times)

Danielle

  • Guest
Upgrading OpenSSL
« on: September 12, 2006, 08:29:51 AM »
Hi,

There is a security hole in the prior OpenSSL versions, so you can upgrade OpenSSL by doing the following set of commands in shell:

Code: [Select]
openssl version
Most should be 0.9.7a.  If you find a different version such as 0.9.8, please email dedicated@lunarpages.com to ask an admin what to do.

Code: [Select]
mkdir /root/setup && cd /root/setup
wget http://www.openssl.org/source/openssl-0.9.7k.tar.gz
tar -xvzf openssl-0.9.7k.tar.gz
cd openssl*
./config
make
make install

For ./config, make and make install commands, allow the command to process and complete prior to going onto the next command.

Then restart Apache however you normally do so, usually it would be the following:

Code: [Select]
/etc/init.d/httpd stop
killall -9 httpd
/etc/init.d/httpd startssl

If your server does not have /etc/rc.d/init.d symlinked to /etc/init.d, you would need to instead use /etc/init.d/rc.d for the command path.  If your server does not have startssl on it, use start instead for the last command part.

Browse to a secure page on the server to test other than cPanel or WHM (provided you have any secure pages using https).

Code: [Select]
vi /etc/yum.conf
Edit the exclude line to encompass openssl so it isnít overwritten by the old version by doing Esc+i keys:

Code: [Select]
exclude=mod_ssl* httpd* perl mysql* php* spamassassin* kernel* exim* courier* apache* openssl*
Your listing order might differ, the only important thing is basically adding the openssl* at the end of the exclude= line as the above example shows.  You wouldn't remove or add any other ones not already in the exclude line.

Save the file (:wq in vi).

If you have any issues arise, please let us know by sending a ticket to dedicated@lunarpages.com or by posting those questions here.

Thanks.
« Last Edit: June 15, 2007, 02:05:04 PM by Danielle »

Offline wilmatan

  • Intergalactic Cowboy
  • *****
  • Posts: 51
Re: Upgrading OpenSSL
« Reply #1 on: May 04, 2011, 06:55:44 AM »
Really Helpful!

Thanks for the follow up and information.... :yep: :yep: :yep:

Offline daoduchung304

  • Trekkie
  • **
  • Posts: 10
Re: Upgrading OpenSSL
« Reply #2 on: April 13, 2012, 04:51:11 PM »
oh good! Thanks you for sharing
« Last Edit: June 07, 2012, 05:03:53 AM by Hush »

Offline konetkar500

  • Trekkie
  • **
  • Posts: 13
Re: Upgrading OpenSSL
« Reply #3 on: November 20, 2012, 04:23:41 AM »
this is wat i am looking for thanks for sharing

Offline norrowsfan

  • Spacescooter Operator
  • *****
  • Posts: 30
Re: Upgrading OpenSSL
« Reply #4 on: February 04, 2013, 06:37:49 AM »
Thanks

 

Share |