Topic: Update OpenSSL used by PHP

Hi!

I'm currently running PHP 7.2.22 from Remi's repo on CentOS 6 but I can't use HTTP2 due to OpenSSL version is 1.0.1e and ALPN is only supported from 1.0.2.

I have updated the system's OpenSSL version to 1.1.1c and my question is that how can I include this to my PHP installation?

The route of new OpenSSL is at: /usr/local/bin/openssl

Thank you!

Re: Update OpenSSL used by PHP

CentOS 6 is close to EOL (in ~1year)

At least update to 7.7 or upcoming 8.0 which will provide all what you need.

Sorry, but updating such a critical system library is not something I plan to do.

Desktop: Fedora 29 x86_64 + rpmfusion + remi-test + remi-dev
Laptop:  Fedora 30 x86_64 + rpmfusion + remi (SCL only)
Hosting Server: CentOS 6.10 x86_64 with EPEL, remi, remi-php72 and remi-php72-test

Re: Update OpenSSL used by PHP

FYI

mod_http2 is part of CentOS / RHEL 8.0 (httpd now use event MPM by default with php-fpm)
mod_http2 is part of CentOS / RHEL 7.7 provided by the httpd24 Software Collection

Desktop: Fedora 29 x86_64 + rpmfusion + remi-test + remi-dev
Laptop:  Fedora 30 x86_64 + rpmfusion + remi (SCL only)
Hosting Server: CentOS 6.10 x86_64 with EPEL, remi, remi-php72 and remi-php72-test

Re: Update OpenSSL used by PHP

Hi Remi,

Of course I understand your point, my question was regarding if is there any way to do the upgrade on my own?

Thanks!

Re: Update OpenSSL used by PHP

> Of course I understand your point, my question was regarding if is there any way to do the upgrade on my own?

Yes: rebuild everything which use OpenSSL
(so mostly all the distro)

By experience, if there is both OpenSSL 1.0 and 1.x in the PHP stack (process memory), you will encounter segfaults.

Desktop: Fedora 29 x86_64 + rpmfusion + remi-test + remi-dev
Laptop:  Fedora 30 x86_64 + rpmfusion + remi (SCL only)
Hosting Server: CentOS 6.10 x86_64 with EPEL, remi, remi-php72 and remi-php72-test

Re: Update OpenSSL used by PHP

Notice: mod_http2 is also part of httpd24 Software Collection for RHEL / CentOS 6
So, if you need httpd, I recommend you use this package

Of course this imply to also use php-fpm.

Desktop: Fedora 29 x86_64 + rpmfusion + remi-test + remi-dev
Laptop:  Fedora 30 x86_64 + rpmfusion + remi (SCL only)
Hosting Server: CentOS 6.10 x86_64 with EPEL, remi, remi-php72 and remi-php72-test