Topic: Update OpenSSL used by PHP

Hi!

I'm currently running PHP 7.2.22 from Remi's repo on CentOS 6 but I can't use HTTP2 due to OpenSSL version is 1.0.1e and ALPN is only supported from 1.0.2.

I have updated the system's OpenSSL version to 1.1.1c and my question is that how can I include this to my PHP installation?

The route of new OpenSSL is at: /usr/local/bin/openssl

Thank you!

Re: Update OpenSSL used by PHP

CentOS 6 is close to EOL (in ~1year)

At least update to 7.7 or upcoming 8.0 which will provide all what you need.

Sorry, but updating such a critical system library is not something I plan to do.

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Re: Update OpenSSL used by PHP

FYI

mod_http2 is part of CentOS / RHEL 8.0 (httpd now use event MPM by default with php-fpm)
mod_http2 is part of CentOS / RHEL 7.7 provided by the httpd24 Software Collection

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Re: Update OpenSSL used by PHP

Hi Remi,

Of course I understand your point, my question was regarding if is there any way to do the upgrade on my own?

Thanks!

Re: Update OpenSSL used by PHP

> Of course I understand your point, my question was regarding if is there any way to do the upgrade on my own?

Yes: rebuild everything which use OpenSSL
(so mostly all the distro)

By experience, if there is both OpenSSL 1.0 and 1.x in the PHP stack (process memory), you will encounter segfaults.

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi

Re: Update OpenSSL used by PHP

Notice: mod_http2 is also part of httpd24 Software Collection for RHEL / CentOS 6
So, if you need httpd, I recommend you use this package

Of course this imply to also use php-fpm.

Laptop:  Fedora 38 + rpmfusion + remi (SCL only)
x86_64 builder: Fedora 39 + rpmfusion + remi-test
aarch64 builder: RHEL 9 with EPEL
Hosting Server: CentOS 8 Stream with EPEL, rpmfusion, remi