SOLVED Openssl-1.1.1n : Should we update it manually or will it be done by cpanel soon?

mickael · Mar 16, 2022

Hi

The whole question is in the title.
I was looking to update, but I don't know if I have to do it manually (no desire to do it) or is it cpanel that it will do it in the middle of the night?

Another question: after updating openssl, should the dedicated server be restarted or not?

Cordialement

cPRex · Mar 16, 2022

Hey there! I believe we're planning on pushing an update to this package tomorrow. The server does not need to be restarted for this to take effect.

cPRex · Mar 17, 2022

This has been released today as part of EA-10564.

mickael · Mar 17, 2022

I updated: yum update
there was openssl111n but it didn't update:

[22:24:03] [email protected] [~]# openssl version

OpenSSL 1.0.2k-fips 26 Jan 2017

[22:24:05] [email protected] [~]#

how to repair?

I restarted the dedicated server, but without success

ITHKBO · Mar 18, 2022

mickael said:
I updated: yum update
there was openssl111n but it didn't update:

[22:24:03] [email protected] [~]# openssl version OpenSSL 1.0.2k-fips 26 Jan 2017 [22:24:05] [email protected] [~]#

how to repair?

I restarted the dedicated server, but without success

Is this a CentOS 7.9 system?
If so please check the following discussion on Redhat Bugzilla

1416715 – Backport TLSv1.3 support from upstream OpenSSL into RHEL 7.x (once at upstream available)

bugzilla.redhat.com

Robert Scheck 2020-03-05 23:42:44 UTC said:
For those coming around via search engines: There is now openssl11 in EPEL 7, see bug #1792741 for the package review and details. The package can be installed additionally, e.g. for linking new/own applications against OpenSSL 1.1 during build, or to use openssl11(1). The OpenSSL version is the same as in RHEL 8 in order to be able to cover security and bugfix updates until RHEL 7 reaches EOL in 2024. Obviously RHEL 7 (base) packages are still linked against OpenSSL 1.0, but EPEL 7 packages could consume OpenSSL 1.1 if needed.

As such if you are running on CentOS 7.9 (as we also are) the latest release that is standard would be OpenSSL 1.0.2-fips 26 jan 2017 when checking the version by its own command. However cPanel delivers a modified version under ea-openssl yum list ea-openssl
If you have everything up to date it should read ea-openssl.x86_64 1.0.2u-2.2.1.cpanel @ EA4
Which (correct me if I am wrong) was rolled out with EA-10564

For all openssl packages you can use rpm -qa | grep openssl

As said in the Bugzilla thread it is possible to run 1.1 but as far as my understanding goes you can't remove 1.0 on CentOS 7.9 without a world of hurt.

There is however one question remaining are you asking how to get 1.1 working because you or a client requires it for a application or is it because of the recent
Security Advisory CVE-2022-0778 ? https://www.openssl.org/news/secadv/20220315.txt

If it is the latter than you should be safe if using 1.0.2u-2.2.1.cpanel
@cPRex Could you confirm this for us?

mickael · Mar 18, 2022

Last night I followed this tutorial How to install the latest version of OpenSSL on CentOS 7? - Linux Windows and android Tutorials to update to OpenSSL 1.1.1n, now the command "openssl version" returns well:

[14:17:25] [email protected] [~]# openssl version
OpenSSL 1.1.1n Mar 15, 2022
[14:17:29] [email protected] [~]#

Now the question I ask myself, was it necessary to do this or did I break things?

[14:17:29] [email protected] [~]# cat /etc/redhat-release
CentOS Linux release 7.9.2009 (Core)
[14:21:17] [email protected] [~]#

cPRex · Mar 18, 2022

The ea-* packages are not dependent on the version of cPanel or the operating system, within reason. I see this on my AlmaLinux 8 box this morning:

ea-openssl11-1.1.1m-1.1.2.cpanel.x86_64

cPRex · Mar 18, 2022

@mickael - it likely wasn't necessary, and could cause conflicts in the future with other cPanel packages.

mickael · Mar 18, 2022

cPRex said:
@mickael - it likely wasn't necessary, and could cause conflicts in the future with other cPanel packages.

Oh dear, how to fix?

When I install .tar.gz with make and make install, I never know how to delete and restore an old or new version, it's one of my weak points in linux

mickael · Mar 18, 2022

976 2022-03-18 14:17:25 history
977 2022-03-18 14:17:29 openssl version
978 2022-03-18 14:21:17 cat /etc/redhat-release
979 2022-03-18 15:53:37 yum install openssl
980 2022-03-18 15:54:15 openssl version
981 2022-03-18 15:54:55 yum remove openssl
982 2022-03-18 16:01:37 cat ~/.bashrc
983 2022-03-18 16:01:55 echo $LD_LIBRARY_PATH
984 2022-03-18 16:02:02 export LD_LIBRARY_PATH=
985 2022-03-18 16:02:04 echo $LD_LIBRARY_PATH
986 2022-03-18 16:02:34 nano ~/.bashrc
987 2022-03-18 16:03:01 openssl version
988 2022-03-18 16:03:13 yum update
989 2022-03-18 16:03:41 node -v
990 2022-03-18 16:03:51 yum upgrade
991 2022-03-18 16:04:01 yum update
992 2022-03-18 16:04:56 yum install openssl
993 2022-03-18 16:05:11 yum update
994 2022-03-18 16:06:57 history
[16:06:57] [email protected] [~]#

[16:06:57] [email protected] [~]# openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017
[16:08:25] [email protected] [~]#

openssl is restored, but on the other hand I lost webmin with "yum remove openssl", and all php 5.6 and 7.4 and 8, how should I do to put them back with a yum?

[16:23:33] [email protected] [~]# service cpanel status
Redirecting to /bin/systemctl status cpanel.service
● cpanel.service - cPanel services
Loaded: loaded (/etc/systemd/system/cpanel.service; enabled; vendor preset: disabled)
Active: failed (Result: exit-code) since ven. 2022-03-18 16:22:48 CET; 1min 29s ago
Process: 1207 ExecStart=/usr/local/cpanel/scripts/restartsrv_cpsrvd --no-verbose --notconfigured-ok --systemd-service=cpanel (code=exited, status=127)
Main PID: 1207 (code=exited, status=127)
Status: "Ready"

I broke everything

mickael · Mar 18, 2022

I have already reinstalled "yum install webmin" and it's good it kept all the configurations and https I have to reinstall cpanel and all the versions of php that I had before?

ITHKBO · Mar 18, 2022

mickael said:
openssl is restored, but on the other hand I lost webmin with "yum remove openssl", and all php 5.6 and 7.4 and 8, how should I do to put them back with a yum?

I would first check to make sure that is all you actually lost by having run the previous yum remove openssl command (do not rerun this)
This can be done with yum history If that really is only webmin and php related than you can restore php with Easy Apache 4 in your GUI

EasyApache 4 Interface | cPanel & WHM Documentation

This interface allows you to update and install Apache, PHP, and other components of your web server.

docs.cpanel.net

If you do not have blueprint of your old profile than you might need to add additional packages later on.
There is one thing you have to do regardless as there are no profiles with php5.6 anymore standard installed.
After choosing a profile like for example "cPanel Default cpanel Contains Apache 2.4, PHP 7.4, and PHP 8" press" Customize" and select php56 than after making your selection go to Review take a screenshot of every bit of the summary.

You are probably aware but for safety I will mention it PHP5.6 is nowadays dangerous to run on production as it is considered EOL.

PHP: Supported Versions

www.php.net

If you do not have a third party vendor that delivers patches for it like CloudLinux I would highly recommend moving over to 7 or 8 as soon as possible.

That said honestly If this was a server under my own care I would do a restore system back-up (snapshot) as the long term effects of removing OpenSSL 1.0 are unknown for this system and cPanel services and unless you are 100% sure that nothing else is removed a restore would be the safest option. But that is of course dependent on it actually being available as service at your datacenter provider and what kind of data is published on the server as well as the sync method. The last thing you want at this stage is losing customer or company data because of loading a older back-up.

A this stage I would wait for cPanel to answer your question and possibly open a support ticket because my gut feeling is telling me that a simple reinstall of cPanel and PHP is not enough.

mickael · Mar 18, 2022

@ITHKBO
thank you for "yum history" I didn't know, it just shows my "yum remove openssl" without giving details of everything it uninstalled, there were lots of dependencies, memory I saw php7.4 and nodejs and webmin and some others

Here is how I solved my problem but I don't know if it's complete:

yum remove openssl

don't do that, because it uninstalls quite a lot of stuff, it broke stuff on my server.

886 2022-03-18 15:54:55 yum remove openssl
887 2022-03-18 16:01:37 cat ~/.bashrc
888 2022-03-18 16:01:55 echo $LD_LIBRARY_PATH
889 2022-03-18 16:02:02 export LD_LIBRARY_PATH=
890 2022-03-18 16:02:04 echo $LD_LIBRARY_PATH
It was empty before updating openssl manually, so I emptied

891 2022-03-18 16:02:34 nano ~/.bashrc
892 2022-03-18 16:03:01 openssl version
893 2022-03-18 16:03:13 yum update
He proposed that nodejs
894 2022-03-18 16:03:41 node -v
896 2022-03-18 16:04:01 yum update
897 2022-03-18 16:04:56 yum install openssl
he reinstalled OpenSSL 1.0.2k-fips 26 Jan 2017

898 2022-03-18 16:05:11 yum update
899 2022-03-18 16:06:57 history
900 2022-03-18 16:08:25 openssl version
[18:32:06] [email protected] [~]# openssl version
OpenSSL 1.0.2k-fips 26 Jan 2017
[18:38:43] [email protected] [~]#

901 2022-03-18 16:11:03 service cpanel status
902 2022-03-18 16:11:16 service cpanel start
903 2022-03-18 16:11:51 service cpanel stop
904 2022-03-18 16:12:00 service cpanel status
905 2022-03-18 16:12:33 yum upgrade
906 2022-03-18 16:12:39 yum update
907 2022-03-18 16:12:54 openssl version
908 2022-03-18 16:13:03 /usr/bin/openssl version
909 2022-03-18 16:13:10 /usr/bin/gcc -v
910 2022-03-18 16:13:48 yum list installed | grep -i openssl

927 2022-03-18 16:22:10 yum install webmin
928 2022-03-18 16:24:18 service cpanel status
is down

933 2022-03-18 16:43:07 /scripts/upcp --force
934 2022-03-18 16:48:56 /usr/local/cpanel/scripts/updatenow --upcp --log=/var/cpanel/updatelogs/update.14477.138822.1647616798.log --force
error "mysqld" something like that
935 2022-03-18 16:49:49 /scripts/check_cpanel_rpms
error "mysqld" something like that

948 2022-03-18 17:05:20 yum install MariaDB-server
it's ok now

949 2022-03-18 17:10:19 /scripts/check_cpanel_rpms
950 2022-03-18 17:17:35 yum history
951 2022-03-18 17:13:49 /scripts/upcp --force
everything is ok now
952 2022-03-18 17:23:04 reboot

969 2022-03-18 17:57:40 service mysql stop
970 2022-03-18 17:57:45 service httpd stop
971 2022-03-18 17:57:48 reboot
SQL problem that does not start automatically on reboot
972 2022-03-18 18:03:10 history
973 2022-03-18 18:03:19 openssl version
974 2022-03-18 18:03:57 /scripts/restartsrv_mysql --status
975 2022-03-18 18:04:19 service mysql start
976 2022-03-18 18:04:56 service cpanel status
977 2022-03-18 18:05:00 reboot
978 2022-03-18 18:08:58 service mysql status
979 2022-03-18 18:09:50 history
980 2022-03-18 18:10:14 sudo systemctl status mariadb
981 2022-03-18 18:12:07 sudo systemctl enable mariadb
982 2022-03-18 18:12:16 sudo systemctl status mariadb
983 2022-03-18 18:12:21 sudo systemctl start mariadb
984 2022-03-18 18:13:11 service mysql stop
985 2022-03-18 18:13:13 service httpd stop
986 2022-03-18 18:13:18 reboot
987 2022-03-18 18:16:58 history
Now it starts
[18:32:06] [email protected] [~]#

Cpanel, mariadb, php server all working now, all sites are working again

Normally everything is fine

ffeingol · Mar 18, 2022

/var/log/yum.log would have everything. If you remove one package, that then removes 10 others, all 11 will show removed the the log.

mickael · Mar 18, 2022

ffeingol said:
/var/log/yum.log would have everything. If you remove one package, that then removes 10 others, all 11 will show removed the the log.

Thank, It's good to know

[19:59:14] [email protected] [~]# cat /var/log/yum.log
Mar 18 15:57:38 Erased: cpanel-php74-webmail-5.2.22-1.cp11102.noarch
Mar 18 15:57:41 Erased: cpanel-php74-imp-6.2.27-1.cp11102.noarch
Mar 18 15:57:42 Erased: cpanel-php74-kronolith-4.2.29-1.cp11102.noarch
Mar 18 15:57:43 Erased: cpanel-php74-nag-4.2.19-1.cp11102.noarch
Mar 18 15:57:45 Erased: cpanel-php74-turba-4.2.25-1.cp11102.noarch
Mar 18 15:57:46 Erased: cpanel-php74-mnemo-4.2.14-1.cp11102.noarch
Mar 18 15:57:47 Erased: cpanel-php74-trean-1.1.10-1.cp11102.noarch
Mar 18 15:57:49 Erased: cpanel-php74-ingo-3.2.16-1.cp11102.noarch
Mar 18 15:57:51 Erased: cpanel-php74-horde-5.2.23-3.cp11102.noarch
Mar 18 15:57:53 Erased: cpanel-php74-horde-form-2.0.20-1.cp11102.noarch
Mar 18 15:57:54 Erased: cpanel-php74-horde-rpc-2.1.9-1.cp11102.noarch
Mar 18 15:57:55 Erased: cpanel-php74-horde-syncml-2.0.7-1.cp11102.noarch
Mar 18 15:57:56 Erased: cpanel-php74-content-2.0.6-1.cp11102.noarch
Mar 18 15:57:56 Erased: cpanel-php74-horde-mail-autoconfig-1.0.3-1.cp11102.noarch
Mar 18 15:57:58 Erased: cpanel-php74-horde-imap-client-2.29.17-1.cp11102.noarch
Mar 18 15:57:59 Erased: cpanel-php74-horde-crypt-2.7.12-1.cp11102.noarch
Mar 18 15:57:59 Erased: cpanel-php74-horde-service-twitter-2.1.6-1.cp11102.noarch
Mar 18 15:58:00 Erased: cpanel-php74-timeobjects-2.1.4-1.cp11102.noarch
Mar 18 15:58:01 Erased: cpanel-php74-horde-image-2.6.1-1.cp11102.noarch
Mar 18 15:58:02 Erased: cpanel-php74-horde-service-facebook-2.0.10-1.cp11102.noarch
Mar 18 15:58:05 Erased: cpanel-php74-horde-cssminify-1.0.4-1.cp11102.noarch
Mar 18 15:58:06 Erased: cpanel-php74-horde-dav-1.1.4-1.cp11102.noarch
Mar 18 15:58:06 Erased: cpanel-php74-horde-tree-2.0.5-1.cp11102.noarch
Mar 18 15:58:07 Erased: cpanel-php74-horde-timezone-1.1.0-1.cp11102.noarch
Mar 18 15:58:08 Erased: cpanel-php74-horde-vfs-2.4.1-1.cp11102.noarch
Mar 18 15:58:09 Erased: cpanel-php74-horde-editor-2.0.5-1.cp11102.noarch
Mar 18 15:58:12 Erased: cpanel-php74-horde-feed-2.0.4-1.cp11102.noarch
Mar 18 15:58:15 Erased: cpanel-php74-horde-javascriptminify-1.1.5-1.cp11102.noarch
Mar 18 15:58:15 Erased: cpanel-php74-horde-oauth-2.0.4-1.cp11102.noarch
Mar 18 15:58:16 Erased: cpanel-php74-horde-argv-2.1.0-1.cp11102.noarch
Mar 18 15:58:17 Erased: cpanel-php74-horde-text-diff-2.2.1-1.cp11102.noarch
Mar 18 15:58:17 Erased: cpanel-php74-horde-date-parser-2.0.7-1.cp11102.noarch
Mar 18 15:58:18 Erased: cpanel-php74-horde-routes-2.0.5-1.cp11102.noarch
Mar 18 15:58:19 Erased: cpanel-php74-horde-itip-2.1.2-1.cp11102.noarch
Mar 18 15:58:19 Erased: cpanel-php74-horde-spellchecker-2.1.3-1.cp11102.noarch
Mar 18 15:58:20 Erased: cpanel-php74-horde-elasticsearch-1.0.4-1.cp11102.noarch
Mar 18 15:58:21 Erased: cpanel-php74-horde-http-2.1.7-1.cp11102.noarch
Mar 18 15:58:22 Erased: cpanel-php74-horde-pack-1.0.7-1.cp11102.noarch
Mar 18 15:58:22 Erased: cpanel-php74-horde-idna-1.1.2-1.cp11102.noarch
Mar 18 15:58:23 Erased: cpanel-php74-horde-yaml-2.1.0-1.cp11102.noarch
Mar 18 15:58:24 Erased: cpanel-php74-horde-core-2.31.16-1.cp11102.noarch
Mar 18 15:58:26 Erased: cpanel-php74-horde-mime-viewer-2.2.2-1.cp11102.noarch
Mar 18 15:58:27 Erased: cpanel-php74-horde-share-2.2.0-1.cp11102.noarch
Mar 18 15:58:28 Erased: cpanel-php74-horde-data-2.1.5-1.cp11102.noarch
Mar 18 15:58:29 Erased: cpanel-php74-horde-icalendar-2.1.8-1.cp11102.noarch
Mar 18 15:58:30 Erased: cpanel-php74-horde-perms-2.1.8-1.cp11102.noarch
Mar 18 15:58:31 Erased: cpanel-php74-horde-controller-2.0.5-1.cp11102.noarch
Mar 18 15:58:32 Erased: cpanel-php74-horde-prefs-2.9.0-1.cp11102.noarch
Mar 18 15:58:33 Erased: cpanel-php74-horde-token-2.0.9-1.cp11102.noarch
Mar 18 15:58:34 Erased: cpanel-php74-horde-compress-2.2.4-1.cp11102.noarch
Mar 18 15:58:35 Erased: cpanel-php74-horde-alarm-2.2.10-1.cp11102.noarch
Mar 18 15:58:35 Erased: cpanel-php74-horde-cache-2.5.5-1.cp11102.noarch
Mar 18 15:58:36 Erased: cpanel-php74-horde-secret-2.0.6-1.cp11102.noarch
Mar 18 15:58:37 Erased: cpanel-php74-horde-smtp-1.9.6-1.cp11102.noarch
Mar 18 15:58:38 Erased: cpanel-php74-horde-view-2.0.6-1.cp11102.noarch
Mar 18 15:58:38 Erased: cpanel-php74-horde-crypt-blowfish-1.1.3-1.cp11102.noarch
Mar 18 15:58:39 Erased: cpanel-php74-horde-log-2.3.0-1.cp11102.noarch
Mar 18 15:58:39 Erased: cpanel-php74-horde-group-2.1.1-1.cp11102.noarch
Mar 18 15:58:40 Erased: cpanel-php74-horde-browser-2.0.16-1.cp11102.noarch
Mar 18 15:58:41 Erased: cpanel-php74-horde-text-filter-2.3.7-1.cp11102.noarch
Mar 18 15:58:42 Erased: cpanel-php74-horde-auth-2.2.2-1.cp11102.noarch
Mar 18 15:58:46 Erased: cpanel-php74-horde-cli-2.3.0-1.cp11102.noarch
Mar 18 15:58:47 Erased: cpanel-php74-horde-history-2.3.6-1.cp11102.noarch
Mar 18 15:58:47 Erased: cpanel-php74-horde-db-2.4.1-1.cp11102.noarch
Mar 18 15:58:48 Erased: cpanel-php74-horde-date-2.4.1-1.cp11102.noarch
Mar 18 15:58:49 Erased: cpanel-php74-horde-nls-2.2.1-1.cp11102.noarch
Mar 18 15:58:50 Erased: cpanel-php74-horde-lock-2.1.4-1.cp11102.noarch
Mar 18 15:58:50 Erased: cpanel-php74-horde-notification-2.0.4-1.cp11102.noarch
Mar 18 15:58:51 Erased: cpanel-php74-horde-serialize-2.0.5-1.cp11102.noarch
Mar 18 15:58:52 Erased: cpanel-php74-horde-sessionhandler-2.3.0-1.cp11102.noarch
Mar 18 15:58:52 Erased: cpanel-php74-horde-compress-fast-1.1.1-1.cp11102.noarch
Mar 18 15:58:53 Erased: cpanel-php74-horde-url-2.2.6-1.cp11102.noarch
Mar 18 15:58:53 Erased: cpanel-php74-horde-injector-2.0.5-1.cp11102.noarch
Mar 18 15:58:54 Erased: cpanel-php74-horde-logintasks-2.0.7-1.cp11102.noarch
Mar 18 15:58:55 Erased: cpanel-php74-horde-xml-element-2.0.4-1.cp11102.noarch
Mar 18 15:58:55 Erased: cpanel-php74-horde-stream-1.6.3-1.cp11102.noarch
Mar 18 15:58:56 Erased: cpanel-php74-horde-xml-wbxml-2.0.4-1.cp11102.noarch
Mar 18 15:58:57 Erased: cpanel-php74-horde-listheaders-1.2.5-1.cp11102.noarch
Mar 18 15:58:58 Erased: cpanel-php74-horde-mail-2.6.5-1.cp11102.noarch
Mar 18 15:58:59 Erased: cpanel-php74-horde-mime-2.11.1-1.cp11102.noarch
Mar 18 15:58:59 Erased: cpanel-php74-horde-support-2.2.0-1.cp11102.noarch
Mar 18 15:59:00 Erased: cpanel-php74-horde-text-flowed-2.0.4-1.cp11102.noarch
Mar 18 15:59:00 Erased: cpanel-php74-horde-hashtable-1.2.6-1.cp11102.noarch
Mar 18 15:59:01 Erased: cpanel-php74-horde-imsp-2.0.10-1.cp11102.noarch
Mar 18 15:59:02 Erased: cpanel-php74-horde-kolab-format-2.0.9-1.cp11102.noarch
Mar 18 15:59:03 Erased: cpanel-php74-horde-kolab-session-2.0.3-1.cp11102.noarch
Mar 18 15:59:04 Erased: cpanel-php74-horde-pdf-2.0.8-1.cp11102.noarch
Mar 18 15:59:04 Erased: cpanel-php74-horde-socket-client-2.1.3-1.cp11102.noarch
Mar 18 15:59:05 Erased: cpanel-php74-horde-exception-2.0.8-1.cp11102.noarch
Mar 18 15:59:05 Erased: alt-python35-peewee_migrate-0.6.4-2.el7.noarch
Mar 18 15:59:06 Erased: cpanel-exim-4.95-1.cp1198.x86_64
Mar 18 15:59:07 Erased: cpanel-letsencrypt-v2-1.04-1.1.1.cpanel.noarch
Mar 18 15:59:11 Erased: cpanel-perl-532-mail-spamassassin-3.004004-9.cp1198.x86_64
Mar 18 15:59:12 Erased: cpanel-php74-horde-translation-2.2.2-1.cp11102.noarch
Mar 18 15:59:12 Erased: cpanel-php74-horde-util-2.5.9-1.cp11102.noarch
Mar 18 15:59:13 Erased: cpanel-php74-horde-stream-wrapper-2.1.4-1.cp11102.noarch
Mar 18 15:59:13 Erased: cpanel-php74-horde-stream-filter-2.0.4-1.cp11102.noarch
Mar 18 15:59:14 Erased: cpanel-php74-horde-constraint-2.0.3-1.cp11102.noarch
Mar 18 15:59:14 Erased: cpanel-php74-horde-autoloader-2.1.2-1.cp11102.noarch
Mar 18 15:59:15 Erased: cpanel-php74-horde-css-parser-1.0.11-1.cp11102.noarch
Mar 18 15:59:16 Erased: cpanel-php74-horde-template-2.0.3-1.cp11102.noarch
Mar 18 15:59:16 Erased: cpanel-php74-horde-rdo-2.1.0-1.cp11102.noarch
Mar 18 15:59:17 Erased: cpanel-php74-horde-queue-1.1.5-1.cp11102.noarch
Mar 18 15:59:17 Erased: cpanel-php74-net-imap-1.1.3-1.cp11102.noarch
Mar 18 15:59:18 Erased: cpanel-php74-net-smtp-1.8.1-1.cp11102.noarch
Mar 18 15:59:18 Erased: cpanel-php74-date-holidays-spain-0.1.4-1.cp11102.noarch
Mar 18 15:59:18 Erased: cpanel-php74-date-holidays-turkey-0.1.1-1.cp11102.noarch
Mar 18 15:59:19 Erased: cpanel-php74-date-holidays-denmark-0.1.3-1.cp11102.noarch
Mar 18 15:59:19 Erased: cpanel-php74-date-holidays-uno-0.1.3-1.cp11102.noarch
Mar 18 15:59:20 Erased: cpanel-perl-532-dns-unbound-0.27-1.cp1198.x86_64
Mar 18 15:59:23 Erased: cpanel-php74-date-holidays-italy-0.1.1-1.cp11102.noarch
Mar 18 15:59:24 Erased: cpanel-php74-date-holidays-slovenia-0.1.2-1.cp11102.noarch
Mar 18 15:59:25 Erased: cpanel-php74-date-holidays-croatia-0.1.1-1.cp11102.noarch
Mar 18 15:59:25 Erased: cpanel-php74-date-holidays-sanmarino-0.1.1-1.cp11102.noarch
Mar 18 15:59:26 Erased: cpanel-perl-532-crypt-openssl-pkcs10-0.16-1.cp1198.x86_64
Mar 18 15:59:26 Erased: cpanel-php74-date-holidays-japan-0.1.3-1.cp11102.noarch
Mar 18 15:59:26 Erased: cpanel-php74-date-holidays-venezuela-0.1.1-1.cp11102.noarch
Mar 18 15:59:27 Erased: cpanel-php74-date-holidays-czech-0.1.0-1.cp11102.noarch
Mar 18 15:59:27 Erased: cpanel-php74-date-holidays-ukraine-0.1.2-1.cp11102.noarch
Mar 18 15:59:27 Erased: cpanel-php74-date-holidays-englandwales-0.1.5-1.cp11102.noarch
Mar 18 15:59:28 Erased: cpanel-php74-date-holidays-phpdotnet-0.1.2-1.cp11102.noarch
Mar 18 15:59:28 Erased: cpanel-php74-services-weather-1.4.7-1.cp11102.noarch
Mar 18 15:59:29 Erased: cpanel-perl-532-net-ftpssl-0.42-1.cp1198.noarch
Mar 18 15:59:30 Erased: cpanel-php74-date-holidays-australia-0.2.2-1.cp11102.noarch
Mar 18 15:59:30 Erased: cpanel-php74-net-sieve-1.4.4-1.cp11102.noarch
Mar 18 15:59:33 Erased: cpanel-phpmyadmin-4.9.7-1.cp11102.noarch
Mar 18 15:59:34 Erased: cpanel-php74-date-holidays-brazil-0.1.2-1.cp11102.noarch
Mar 18 15:59:35 Erased: cpanel-php74-soap-0.14.0-1.cp11102.noarch
Mar 18 15:59:36 Erased: cpanel-php74-http-request-1.4.4-1.cp11102.noarch
Mar 18 15:59:36 Erased: cpanel-php74-date-holidays-romania-0.1.2-1.cp11102.noarch
Mar 18 15:59:37 Erased: cpanel-php74-date-holidays-netherlands-0.1.4-1.cp11102.noarch
Mar 18 15:59:37 Erased: cpanel-perl-532-net-google-drive-simple-0.19-1.cp1198.noarch
Mar 18 15:59:37 Erased: cpanel-perl-532-crypt-ssleay-0.73~06-1.cp1198.x86_64
Mar 18 15:59:38 Erased: cpanel-php74-date-holidays-usa-0.1.1-1.cp11102.noarch
Mar 18 15:59:39 Erased: cpanel-php74-date-holidays-sweden-0.1.3-1.cp11102.noarch
Mar 18 15:59:39 Erased: cpanel-perl-532-crypt-openssl-ec-1.32-1.cp1198.x86_64
Mar 18 15:59:39 Erased: cpanel-php74-date-holidays-iceland-0.1.2-1.cp11102.noarch
Mar 18 15:59:40 Erased: cpanel-php74-date-holidays-ireland-0.1.3-1.cp11102.noarch
Mar 18 15:59:40 Erased: cpanel-php74-date-holidays-norway-0.1.2-1.cp11102.noarch
Mar 18 15:59:42 Erased: cpanel-perl-532-dns-ldns-0.61-2.cp1198.x86_64
Mar 18 15:59:43 Erased: cpanel-php74-date-holidays-austria-0.1.6-1.cp11102.noarch
Mar 18 15:59:43 Erased: cpanel-php74-date-holidays-portugal-0.1.1-1.cp11102.noarch
Mar 18 15:59:44 Erased: cpanel-php74-date-holidays-serbia-0.1.0-1.cp11102.noarch
Mar 18 15:59:45 Erased: cpanel-php74-date-holidays-russia-0.1.0-1.cp11102.noarch
Mar 18 15:59:45 Erased: cpanel-php74-date-holidays-finland-0.1.2-1.cp11102.noarch
Mar 18 15:59:46 Erased: alt-python35-aiohttp-3.0.8-2.el7.x86_64
Mar 18 15:59:46 Erased: cpanel-php74-date-holidays-germany-0.1.2-1.cp11102.noarch
Mar 18 15:59:47 Erased: cpanel-php74-date-holidays-0.21.8-1.cp11102.noarch
Mar 18 15:59:47 Erased: cpanel-php74-xml-serializer-0.21.0-1.cp11102.noarch
Mar 18 15:59:49 Erased: cpanel-php74-xml-parser-1.3.8-1.cp11102.noarch
Mar 18 15:59:50 Erased: cpanel-php74-date-1.4.7-1.cp11102.noarch
Mar 18 15:59:50 Erased: alt-python35-chardet-3.0.4-1.el7.noarch
Mar 18 15:59:51 Erased: cpanel-perl-532-crypt-openssl-bignum-0.09-1.cp1198.x86_64
Mar 18 15:59:51 Erased: cpanel-php74-net-socket-1.2.2-1.cp11102.noarch
Mar 18 15:59:52 Erased: cpanel-php74-net-url-1.0.15-1.cp11102.noarch
Mar 18 15:59:52 Erased: cpanel-mysql-5.6.43-1.cp1198.x86_64
Mar 18 15:59:53 Erased: cpanel-php74-horde-role-1.0.1-1.cp11102.noarch
Mar 18 15:59:53 Erased: cpanel-perl-532-mail-dkim-1.20200907-1.cp1198.noarch
Mar 18 15:59:53 Erased: cpanel-perl-532-crypt-openssl-rsa-0.31-1.cp1198.x86_64
Mar 18 15:59:54 Erased: cpanel-perl-532-crypt-openssl-random-0.15-1.cp1198.x86_64
Mar 18 15:59:56 Erased: cpanel-perl-532-crypt-openssl-x509-1.813-1.cp1198.x86_64
Mar 18 15:59:57 Erased: cpanel-perl-532-net-acme2-0.35-1.cp1198.noarch
Mar 18 15:59:57 Erased: alt-python35-mock-2.0.0-2.el7.noarch
Mar 18 15:59:57 Erased: alt-python35-pbr-1.8.1-2.el7.noarch
Mar 18 15:59:58 Erased: cpanel-php74-net-dns2-1.4.4-1.cp11102.noarch
Mar 18 15:59:58 Erased: cpanel-php74-mail-1.4.1-1.cp11102.noarch
Mar 18 15:59:59 Erased: cpanel-php74-mail-mime-1.10.2-1.cp11102.noarch
Mar 18 15:59:59 Erased: cpanel-php74-auth-sasl-1.1.0-1.cp11102.noarch
Mar 18 16:00:00 Erased: cpanel-php74-xml-svg-1.1.0-1.cp11102.noarch
Mar 18 16:00:01 Erased: cpanel-munin-2.0.30-2.cp1198.x86_64
Mar 18 16:00:06 Erased: MariaDB-server-10.3.34-1.el7.centos.x86_64
Mar 18 16:00:18 Erased: webmin-1.990-1.noarch
Mar 18 16:00:21 Erased: alt-python35-daemon-2.1.1-1.el7.noarch
Mar 18 16:00:21 Erased: alt-python35-lockfile-0.12.2-1.el7.noarch
Mar 18 16:00:22 Erased: cpanel-php74-http-1.4.1-1.cp11102.noarch
Mar 18 16:00:22 Erased: cpanel-perl-532-git-wrapper-0.048-1.cp1198.noarch
Mar 18 16:00:23 Erased: cpanel-php74-console-color-1.0.3-1.cp11102.noarch
Mar 18 16:00:23 Erased: cpanel-php74-http-webdav-server-1.0.0-1.cp11102.noarch
Mar 18 16:00:23 Erased: cpanel-perl-532-http-daemon-ssl-1.04-1.cp1198.noarch
Mar 18 16:00:24 Erased: cpanel-perl-532-net-https-any-0.12-1.cp1198.noarch
Mar 18 16:00:24 Erased: cpanel-php74-cache-1.5.6-1.cp11102.noarch
Mar 18 16:00:25 Erased: cpanel-php74-log-1.13.1-1.cp11102.noarch
Mar 18 16:00:28 Erased: cpanel-postgresql-9.2.24-1.cp1198.x86_64
Mar 18 16:00:38 Erased: cpanel-roundcubemail-1.4.12-2.cp11102.noarch
Mar 18 16:00:39 Erased: cpanel-php74-text-figlet-1.0.2-1.cp11102.noarch
Mar 18 16:00:40 Erased: cpanel-perl-532-cpanel-publicapi-2.8-1.cp1198.noarch
Mar 18 16:00:40 Erased: cpanel-php74-mdb2-2.4.1-1.cp11102.noarch
Mar 18 16:00:41 Erased: cpanel-perl-532-crypt-openssl-pkcs12-1.3-1.cp1198.x86_64
Mar 18 16:00:41 Erased: cpanel-perl-532-crypt-openssl-dsa-0.19-1.cp1198.x86_64
Mar 18 16:00:42 Erased: cpanel-php-composer-2.1.11-1.cp11102.noarch
Mar 18 16:00:42 Erased: cpanel-php-ioncube-11.0.0-1.cp11102.x86_64
Mar 18 16:00:43 Erased: cpanel-php-sourceguardian-12.1.2-4.cp11102.x86_64
Mar 18 16:00:43 Erased: cpanel-perl-532-net-dns-sec-1.18-1.cp1198.x86_64
Mar 18 16:00:43 Erased: cpanel-php74-net-useragent-detect-2.5.2-1.cp11102.noarch
Mar 18 16:00:44 Erased: perl-libwww-perl-6.05-2.el7.noarch
Mar 18 16:00:44 Erased: perl-Net-HTTP-6.06-2.el7.noarch
Mar 18 16:00:45 Erased: perl-IO-Socket-SSL-1.94-7.el7.noarch
Mar 18 16:00:45 Erased: cpanel-perl-532-rest-client-273-1.cp1198.noarch
Mar 18 16:00:46 Erased: cpanel-perl-532-lwp-protocol-https-6.09-1.cp1198.noarch
Mar 18 16:00:46 Erased: cpanel-perl-532-io-socket-ssl-2.068-1.cp1198.noarch
Mar 18 16:00:46 Erased: cpanel-perl-532-net-ssleay-1.90-1.cp1198.x86_64
Mar 18 16:00:47 Erased: alt-python35-pyjwt-1.6.4-1.el7.noarch
Mar 18 16:00:47 Erased: cpanel-php74-file-fstab-2.0.3-1.cp11102.noarch
Mar 18 16:00:48 Erased: cpanel-php74-net-ftp-1.4.0-1.cp11102.noarch
Mar 18 16:00:49 Erased: cpanel-php74-console-table-1.3.1-1.cp11102.noarch
Mar 18 16:00:49 Erased: cpanel-php74-html-template-it-1.3.1-1.cp11102.noarch
Mar 18 16:00:49 Erased: cpanel-php74-file-1.4.1-1.cp11102.noarch
Mar 18 16:00:50 Erased: cpanel-php74-db-1.9.3-1.cp11102.noarch
Mar 18 16:00:50 Erased: cpanel-php74-xml-rpc-1.5.5-1.cp11102.noarch
Mar 18 16:00:53 Erased: imunify-antivirus-cpanel-6.3.1-4.noarch
Mar 18 16:00:59 Erased: imunify-antivirus-6.3.1-4.noarch
Mar 18 16:01:00 Erased: alt-curl-7.64.0-1.el7.x86_64
Mar 18 16:01:00 Erased: cpanel-phppgadmin-5.6.0-2.cp11102.noarch
Mar 18 16:01:01 Erased: cpanel-php74-file-find-1.3.3-1.cp11102.noarch
Mar 18 16:01:02 Erased: cpanel-php74-pear-command-packaging-0.3.0-1.cp11102.noarch
Mar 18 16:01:03 Erased: cpanel-php74-7.4.27-1.cp11102.x86_64
Mar 18 16:01:03 Erased: cpanel-perl-532-git-repository-1.324-1.cp1198.noarch
Mar 18 16:01:04 Erased: cpanel-git-2.34.1-1.cp1198.x86_64
Mar 18 16:01:08 Erased: alt-python35-humanize-0.5.1-2.el7.cloudlinux.noarch
Mar 18 16:01:09 Erased: alt-python35-peewee-2.8.3-1.el7.x86_64
Mar 18 16:01:10 Erased: alt-python35-psutil-5.4.7-1.el7.x86_64
Mar 18 16:01:11 Erased: alt-python35-libs-3.5.7-2.el7.x86_64
Mar 18 16:01:12 Erased: alt-python35-setuptools-36.3.0-1.el7.noarch
Mar 18 16:01:13 Erased: alt-python35-pip-20.2.4-1.el7.noarch
Mar 18 16:01:14 Erased: alt-python35-3.5.7-2.el7.x86_64
Mar 18 16:01:15 Erased: 1:ai-bolit-31.5.3-1.el7.x86_64
Mar 18 16:01:16 Erased: galera-25.3.35-1.el7.centos.x86_64
Mar 18 16:01:16 Erased: cpanel-ldns-1.8.1-2.cp1198.x86_64
Mar 18 16:01:17 Erased: cpanel-unbound-1.13.2-1.cp1198.x86_64
Mar 18 16:01:17 Erased: cpanel-dovecot-xaps-2.3.15-3.cp11100.x86_64
Mar 18 16:01:19 Erased: cpanel-dovecot-2.3.15-3.cp11100.x86_64
Mar 18 16:01:20 Erased: authconfig-6.2.8-30.el7.x86_64
Mar 18 16:01:21 Erased: unbound-1.6.6-5.el7_8.x86_64
Mar 18 16:01:22 Erased: unbound-libs-1.6.6-5.el7_8.x86_64
Mar 18 16:01:23 Erased: 1penssl-1.0.2k-24.el7_9.x86_64
Mar 18 16:04:23 Updated: 2:nodejs-14.19.1-1nodesource.x86_64
Mar 18 16:05:06 Installed: 1penssl-1.0.2k-24.el7_9.x86_64
Mar 18 16:23:31 Installed: webmin-1.990-1.noarch
Mar 18 16:37:13 Installed: perl-IO-Socket-SSL-1.94-7.el7.noarch
Mar 18 16:37:13 Installed: perl-Net-HTTP-6.06-2.el7.noarch
Mar 18 16:37:14 Installed: perl-libwww-perl-6.05-2.el7.noarch
Mar 18 17:09:30 Installed: galera-25.3.35-1.el7.centos.x86_64
Mar 18 17:09:42 Installed: MariaDB-server-10.3.34-1.el7.centos.x86_64
[19:59:18] [email protected] [~]#

Anything in bold is reinstalled, and anything that starts with "cpanel" seems to be fine.

[20:07:59] [email protected] [~]# yum install alt-python35
Modules complémentaires chargés : fastestmirror, universal-hooks
Loading mirror speeds from cached hostfile
* EA4: 185.53.12.144
* cpanel-addons-production-feed: 185.53.12.144
* cpanel-plugins: 185.53.12.144
* centos-sclo-rh: centos.mirror.ate.info
* centos-sclo-sclo: centos.mirror.ate.info
* elrepo: elrepo.reloumirrors.net
* epel: epel.mirror.wearetriple.com
* rpmfusion-free-updates: ftp.nluug.nl
Résolution des dépendances
--> Lancement de la transaction de test
---> Le paquet alt-python35.x86_64 0:3.5.7-2.el7 sera installé
--> Traitement de la dépendance : alt-python35-libs(x86-64) = 3.5.7-2.el7 pour le paquet : alt-python35-3.5.7-2.el7.x86_64
--> Traitement de la dépendance : alt-python35-setuptools pour le paquet : alt-python35-3.5.7-2.el7.x86_64
--> Traitement de la dépendance : alt-python35-pip pour le paquet : alt-python35-3.5.7-2.el7.x86_64
--> Lancement de la transaction de test
---> Le paquet alt-python35-libs.x86_64 0:3.5.7-2.el7 sera installé
---> Le paquet alt-python35-pip.noarch 0:20.2.4-1.el7 sera installé
---> Le paquet alt-python35-setuptools.noarch 0:36.3.0-1.el7 sera installé
--> Résolution des dépendances terminée

Dépendances résolues

=============================================================================================================================================================================================================================================
Package Architecture Version Dépôt Taille
=============================================================================================================================================================================================================================================
Installation :
alt-python35 x86_64 3.5.7-2.el7 imunify360 51 k
Installation pour dépendances :
alt-python35-libs x86_64 3.5.7-2.el7 imunify360 7.7 M
alt-python35-pip noarch 20.2.4-1.el7 imunify360 2.9 M
alt-python35-setuptools noarch 36.3.0-1.el7 imunify360 573 k

Résumé de la transaction
=============================================================================================================================================================================================================================================
Installation 1 Paquet (+3 Paquets en dépendance)

Taille totale des téléchargements : 11 M
Taille d'installation : 56 M
Is this ok [y/d/N]: n
Exiting on user command
Votre transaction a été enregistrée, relancez-la avec :
yum load-transaction /tmp/yum_save_tx.2022-03-18.20-08._s_TVz.yumtx
[20:11:09] [email protected] [~]#

Do I really have to reinstall this to be the same as before?
There really is no trick to restoring everything at once?

mickael · Mar 18, 2022

I restored this one

Mar 18 15:59:07 Erased: cpanel-letsencrypt-v2-1.04-1.1.1.cpanel.noarch

It was easy with:

/usr/local/cpanel/scripts/install_lets_encrypt_autossl_provider

The Let's Encrypt Plugin | cPanel & WHM Documentation

This plugin allows the AutoSSL feature to retrieve certificates from the Let's Encrypt™ provider.

docs.cpanel.net

Thread starter	Similar threads	Forum	Replies	Date
G	Subdomain - The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED)	Security	19	Jul 28, 2022
A	openssl version discrepancy	Security	4	Mar 25, 2022
I	OpenSSL/1.1.1g mod_bwlimited/1.4 configured	Security	1	May 16, 2020
	cPanel Update v86 and OpenSSL 1.1.1	Security	2	Feb 25, 2020
C	libcurl update causes "OpenSSL SSL_read: Success" error for SSL connections	Security	4	Nov 21, 2019

Search

Search

SOLVED Openssl-1.1.1n : Should we update it manually or will it be done by cpanel soon?

mickael

Well-Known Member

cPRex

Jurassic Moderator

cPRex

Jurassic Moderator

mickael

Well-Known Member

ITHKBO

Active Member

1416715 – Backport TLSv1.3 support from upstream OpenSSL into RHEL 7.x (once at upstream available)

mickael

Well-Known Member

cPRex

Jurassic Moderator

cPRex

Jurassic Moderator

mickael

Well-Known Member

mickael

Well-Known Member

mickael

Well-Known Member

ITHKBO

Active Member

EasyApache 4 Interface | cPanel & WHM Documentation

PHP: Supported Versions

mickael

Well-Known Member

ffeingol

Well-Known Member

mickael

Well-Known Member

mickael

Well-Known Member

The Let's Encrypt Plugin | cPanel & WHM Documentation