cPanel Curl Update breaks WHMCS Enom Module

[brianc]

The enom module within WHMCS is no longer functioning with the following error message:

Registrar Error
CURL Error: 56 - OpenSSL SSL_read: Success

Enom is saying this:

We have concluded our investigation into the CURL error that WHMCS users have encountered, and determined the root cause to stem from a recent CURL update in the versions of cPanel used by many WHMCS installations.

Since this is a third-party software configuration, affected customers needing further support should contact WHMCS.

WHMCS is saying this:

Have your servers upgraded to curl 7.67? If so please downgrade to curl 7.66

cPanel how do we do this and how in the world could something like this make it through to our production servers?

 

[Raymond Hayes]

Same issue. But, our version of Curl is 7.29.0-54.el7 - Which does not explain the issues with Curl we have seen reported.

Now, we must note: This is a Virtuozzo VPS for us...so, we do not have much control of the versioning to boot.

Extremely serious issue. No purchases or updates can be done from WHMCS now.

Affects both 84.0.13 and 84.0.14

 

[brianc]

What version of CURL is your PHP saying you are using with WHMCS? You can find that out within WHMCS Utilities -- System -- PHP Info. Mine says

cURL Information

7.67.0

 

[Raymond Hayes]

Sorry. Wrong version noted. We had 7.67. We just downgraded to 7.66, restarted apache....no change.

Reboot?

 

[brianc]

How do you downgrade curl on a cPanel server?

 

[Raymond Hayes]

If using CentOS or other Hat flavor, from console do

yum downgrade ea-libcurl

Then if you use Apache, restart. I would restart php-fpm as well if in use. For us, we use Litespeed. We just restated httpd and then did Restart Detached php resources in Litespeed.

Everything is working now on 7.66

 

[brianc]

Confirmed using 7.66 is working as well for me. I am also using version lock on libcurl until cPanel or whoever issues a fix for this.

 

[quietFinn]

downgrade ea-libcurl worked, and added versionlock also. Some additional info here:

Troubleshooting CURL Error: 56 - OpenSSL SSL_read: Success error | Troubleshooting | Guides & Tutorials

help.whmcs.com

 

[CODE grunt]

Restarting php-fpm was required in our case - was pulling my hair out trying to reconcile why the CLI version was different than the Apache version.

 

[Triggerbox]

Only running yum downgrade ea-libcurl ea-libcurl-devel from the WHMCS article did not have any effect.

We also had to restart php-fpm as Raymond suggested:

1. Log into WHM as root.
2. Search “PHP-FPM” and select PHP-FPM service for Apache.
3. Select Yes to restart the PHP-FPM service.

Thanks!

 

[PPNSteve]

Same issue here as well.. will try downgrading curl to resolve immediate problem

BUT I still want to know if there will be a priority fix by cPanel, etc.

 

[cPAusaf]

There was an unintended change introduced upstream in cURL 7.67 unfortunately:

curl 7.67.0 w/OpenSSL: Missing TLS shutdown from server may cause error · Issue #4624 · curl/curl

If an SSL transfer is made from curl 7.67.0 w/ OpenSSL and the server terminates the connection without giving an acceptable protocol termination point (eg in HTTP would be Content Length or chunke...

github.com

There is a patch provided upstream that we will use for ea-libcurl, though downgrading for now is the only workaround. If you're having issues doing so, please open up a support ticket for further assistance.