libcurl update causes "OpenSSL SSL_read: Success" error for SSL connections

CODE grunt

Registered
Aug 15, 2017
4
0
1
Canada
cPanel Access Level
Root Administrator
WHM updated last night apparently with a problematic version of libcurl. The symptom is that PHP initiated libcurl SSL connections fail with the following error:

OpenSSL SSL_read: Success

No data is returned from the call. This completely breaks outbound API and webservice calls for some services.

This appears to due to this bug:


Reverting libcurl works for CLI usage but does not affect regular web usage because the version installed with EasyApache (ea-php56-php-curl.x86_64 for example) is the affected version 7.67.0.

Any suggestions on how to safely revert the version used by the PHP module appreciated.
 

cPanelLauren

Product Owner
Staff member
Nov 14, 2017
13,296
1,271
313
Houston
Hello,

Yes this is something we're aware of and the only solution right now is to downgrade curl with:

Code:
yum -y downgrade ea-libcurl-7.66.0-1.1.2.cpanel
then add ea-libcurl to exclude in /etc/yum.conf until the updated package is pushed out. This should be done early next week.
 

kdean

Well-Known Member
Oct 19, 2012
371
61
78
Orlando, FL
cPanel Access Level
Root Administrator
Yeah, I later found this article stating that ea-libcurl-7.67.0-2.2.1.cpanel.x86_64 fixes the issue that was broken with ea-libcurl-7.66.0-1.1.2.cpanel.x86_64