OpenLiteSpeed 1.4.18 SSL Broken !!!

Discussion in 'Linux Support: RHEL, CentOS, SUSE etc' started by roottoor, Jun 24, 2016.

  1. roottoor

    roottoor New Member

    After update from version 1.3 to 1.4.18 CloudFlare Flexible SSL stop working, with old version 1.3 everything work just fine, need help!!!
     

    Attached Files:

  2. lsfoo

    lsfoo Administrator

    Hi Roottoor,

    Is this a reproduce-able case on your end? If so, could you enable debug logging, reproduce the problem, and send us the debug log?
     
  3. roottoor

    roottoor New Member

    my server dont show the request in logs when i try to accesss by using https, i see error only in response.
    ps:sorry for bad english
     

    Attached Files:

  4. lsfoo

    lsfoo Administrator

    Are you able to enable debug logging in Cloud Flare? Try to see why the response failed. Error code 520 is a default error for CloudFlare, so it doesn't really provide much information as to why the connection failed.
     
  5. lsfoo

    lsfoo Administrator

    Please submit a bug report to bug at litespeedtech dot com. Title it "OpenLiteSpeed crash" and in the message body, add a link to this thread, the system that you are running (Operating System, 32 or 64 bit, etc.), and attach your core file.

    We will have someone take a look.
     
  6. roottoor

    roottoor New Member

    that what server response before core dump
    Code:
    Cache-Control: private, no-cache, max-age=0
    Pragma: no-cache
    Connection: Close
    
    <html><head><title>400 Bad Request</title></head><body>
    <h2>HTTPS is required</h2>
    <p>This is an SSL protected page, please use the HTTPS scheme instead of the plain HTTP scheme to access this URL.<br />
    <blockquote>Hint: The URL should starts with <b>https</b>://</blockquote> </p>
    <hr />
    Powered By LiteSpeed Web Server<br />
    <a href='http://www.litespeedtech.com'><i>http://www.litespeedtech.com</i></a>
    </body></html>
     
  7. lsfoo

    lsfoo Administrator

    With your core file, please try running:

    gdb /usr/local/lsws/bin/openlitespeed /tmp/lshttpd/bak_core/corefile
    Once in gdb, run bt and send us what it says.

    If you are unfamiliar with the command line, as I mentioned earlier, submit a bug report and we'll take a look at it.
     
  8. roottoor

    roottoor New Member

    http://pastebin.com/FpiQSYLt


    Program terminated with signal 11, Segmentation fault.
    #0 SslConnection::getVersion (this=0x0) at sslconnection.cpp:422
    422 sslconnection.cpp: No such file or directory.
    in sslconnection.cp

    :(
     
  9. lsfoo

    lsfoo Administrator

    Thanks. Will update you when we find out more.
     
    roottoor likes this.
  10. lsfoo

    lsfoo Administrator

    How did you install OLS?

    We found the bug from your backtrace.

    If you installed from source, I will let you know when the github is updated to include the fix. (you will just need to configure using original settings and make. Then copy the openlitespeed binary to the lsws bin. No need to make install).

    If you installed via rpm, the time frame is not as clear, as there are some other changes that need to happen.
     
  11. roottoor

    roottoor New Member

    i install ols from official repo for Centos 6 i just make yum install update and receive a new version, thats all.
     
  12. lsfoo

    lsfoo Administrator

    If you are willing to try it, and are comfortable with the command line, you can try to create a new binary from source.

    If not, as I mentioned, I'm not sure when the rpms will be updated.
     
  13. roottoor

    roottoor New Member

    ok i will try but i don't see commit in github https://github.com/litespeedtech/openlitespeed
     
  14. lsfoo

    lsfoo Administrator

    Will let you know when it's updated.
     
    roottoor likes this.
  15. lsfoo

    lsfoo Administrator

    Hi roottoor,

    The github is now updated.

    Let me know if it helps,
    Kevin
     
    roottoor likes this.
  16. roottoor

    roottoor New Member

    Hi!
    all work just perfect :) Thanks!!!

    little instruction for users, how to update openlitespeed bin file

    PHP:
    ####### only for Centos 6  start #######

    wget http://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
    tar xvf autoconf-2.69.tar.gz
    cd autoconf
    -2.69
    ./configure --prefix=/usr
    make
    sudo make install
    cd 
    ..


    wget http://ftp.gnu.org/gnu/automake/automake-1.13.4.tar.gz
    tar xvf automake-1.13.4.tar.gz
    cd automake
    -1.13.4
    ./configure --prefix=/usr
    make
    sudo make install
    cd 
    ..


    wget http://ftp.gnu.org/gnu/libtool/libtool-2.4.2.tar.gz
    tar xvf libtool-2.4.2.tar.gz
    cd libtool
    -2.4.2
    ./configure --prefix=/usr
    make
    sudo make install
    cd 
    ..

    ####### only for Centos 6  end #######


    git clone https://github.com/litespeedtech/openlitespeed.git
    cd openlitespeed
    ./configure --with-openssl=/usr --enable-http2
    make


    mv 
    /usr/local/lsws/bin/openlitespeed /usr/local/lsws/bin/openlitespeed.backup
    cp 
    ./src/openlitespeed /usr/local/lsws/bin/openlitespeed

    service lsws restart
     
    lsfoo likes this.
  17. lsfoo

    lsfoo Administrator

    Glad to hear it works!
     
    roottoor likes this.

Share This Page