Easyapache upgrade failure when selecting ModSecurity

[BlackRain]

After all these years of using Cpanel, I finally have had a disaster using Easyapache.

Here are my details:

CENTOS 5.9 i686 standard – WHM 11.36.1 (build 5) 
Server Version: Apache/2.2.24 (Unix) mod_ssl/2.2.24 OpenSSL/0.9.8e-fips-rhel5 mod_auth_passthrough/2.1 mod_bwlimited/1.4 FrontPage/5.0.2.2635

I tried to update my Apache software using the Cpanel Easyapache and it died. It would not update because I had selected the ModPerl option due to a inability to install a module

-- Begin 'Mod Mono (.Net 2.x)' is off--
-- End 'Mod Mono (.Net 2.x)' is off --

-- Begin opt 'Mod Perl' --
!! Failed to install CPAN Perl module(s) Compress::Zlib Inline !!

When I deselected ModPerl, I tried again and the Easyapache process died when it got to the ModSecurity install stage giving the error:

-- Begin opt 'Mod Security' --
!! Failed to install CPAN Perl module(s) Regexp::Assemble GnuPG !!

I have run Yum Update and it state none are available.

No package Regexp::Assemble available.

I tried to manually install the missing modules using CPAN but that also gives an error:

# cpan Regexp::Assemble
CPAN: Storable loaded ok
Going to read /root/.cpan/Metadata
Database was generated on Mon, 29 Apr 2013 02:17:23 GMT
Running install for module Regexp::Assemble
Running make for D/DL/DLAND/Regexp-Assemble-0.35.tar.gz
CPAN: LWP::UserAgent loaded ok
Fetching with LWP:
http://cpan.netnitco.net/authors/id/D/DL/DLAND/Regexp-Assemble-0.35.tar.gz
CPAN: Digest::MD5 loaded ok
Fetching with LWP:
http://cpan.netnitco.net/authors/id/D/DL/DLAND/CHECKSUMS
Can't call method "reftype" on unblessed reference at /usr/lib/perl5/5.8.8/i386-linux-thread-multi/Safe.pm line 370.

Anyone have an idea to get ModSecurity working again due to this Easyapache failure?

Thanks!

 

[Infopro]

This thread may be useful to you:
ModSecurity Changes in EasyApache 3.16 - cPanel Forums

 

[BlackRain]

Thanks for the reply. However it is not a Mod Security rules issue. It's an installation issue. ModSecurity won't install because their is a missing dependency somewhere as I posted above.

On my latest attempt to use EasyApache, it quit on the ModSecurity install because GnuGp was missing however I confirmed that is indeed installed.

Still have no idea what to do.

 

[BlackRain]

Here are my Perl details

# /usr/bin/perl -v

This is perl, v5.8.8 built for i386-linux-thread-multi

# /usr/local/bin/perl -v

This is perl, v5.8.8 built for i386-linux-thread-multi

ls -l /usr/bin/perl /usr/local/bin/perl

-rwxr-xr-x 2 root root 14984 Mar 26 16:01 /usr/bin/perl*
lrwxrwxrwx 1 root root 13 Jun 17 2008 /usr/local/bin/perl -> /usr/bin/perl*

# rpm -qf /usr/bin/perl

perl-5.8.8-40.el5_9

# cat /usr/local/cpanel/version

11.36.1.5

 

[BlackRain]

Is this correct? I have a feeling that having two Perl versions installed at /usr/bin/perl and usr/local/bin/perl is borking the install.

# which perl

/usr/local/bin/perl

 

[Infopro]

See if this helps:
Prepare Your Perl Scripts for 11.36 - cPanel Forums
More Info:
Providing the perl stack as RPMs - cPanel Forums

 

[BlackRain]

I did get it working eventually, can't actually say which change I made did the trick as I was up till 2AM last night trying to fix the problem.

The EasyApache upgrade process failed. It required a lot of manual corrections and testing in order to get a new Apache build working. This is the first time I can remember that Easyapache failed in my history with Cpanel.

Things I noticed.

1) Upgrade to lastest PHP ALSO required upgrade of MySql to 5.5 from the 5.1 I had previously.
2) Mod_Perl can not be used in latest Cpanel 11.36 Easyapache function. There should be a notice in the build options.

-- Begin opt 'Mod Perl' --
!! Failed to install CPAN Perl module(s) Compress::Zlib Inline !!

3) Mod_Security could not be built into latest Apache build due to missing Perl modules. They had to be found and installed manually.

-- Begin opt 'Mod Security' --
!! Failed to install CPAN Perl module(s) Regexp::Assemble GnuPG !!

I can not see how a novice Cpanel user could do this update without a support ticket.

 

[ScottTh]

Hi BlackRain,

I'm sorry to hear that you were having some issues with EasyApache. Thank you for your suggestion about including a notice about mod_perl and the latest version of cPanel 11.36. Infopro's link to the post about preparing for 11.36 is helpful http://forums.cpanel.net/f133/prepare-your-perl-scripts-11-36-a-311202.html but as you mentioned, a notice in the build options page could also be helpful.

I'm happy to see that you were able to successfully build EasyApache and in the future please feel free to open a support ticket with us. The techs are tremendous and have a lot of knowledge about EasyApache.

Please let us know if you have any additional questions about this particular EasyApache rebuilding project.