Welcome Guest. Please Login or Register  
Client Area  |  Softaculous Cloud  |  Calendar  |  Quick Links  |  
   


You are here: Index > Virtualizor - Virtual Server Control Panel > General Support > Topic : Heartbleed workaround for Virtualizor



Threaded Mode | Print  

 Heartbleed workaround for Virtualizor (1 Replies, Read 2183 times)
altumaas
Posted on # April 12, 2014, 1:34 am
Group: Member
Post Group: Newbie
Posts: 1
Status:
First off all install and verifies  that you have the fixed bug of OpenSSL
(Release : 16.el6_5.7) install

Code

yum update

yum info openssl

#it should give you ####
#Name        : openssl
#Arch        : x86_64
#Version    : 1.0.1e
#Release    : 16.el6_5.7
#Size        : 4.0 M
#Repo        : installed
#From repo  : updates

#you should have ==>> Release : 16.el6_5.7  install in your machine
[hr]
Next, install and verifies  that you have the newest NGNIX(1.4.7) install in your machine

install the NGNIX using
Code

###For CentOS
wget http://nginx.org/packages/centos/6/noarch/RPMS/nginx-release-centos-6-0.el6.ngx.noarch.rpm

###For Redhat
wget http://nginx.org/packages/rhel/6/noarch/RPMS/nginx-release-rhel-6-0.el6.ngx.noarch.rpm



then
Code


rpm -ivh nginx-release-rhel-6-0.el6.ngx.noarch.rpm

#and
yum install nginx



Code

yum info nginx

#it should give you ####
#Name        : nginx
#Arch        : x86_64
#Version    : 1.4.7
#Release    : 1.el6.ngx
#Size        : 771 k
#Repo        : installed
#From repo  : nginx



And finally, let the Virtualizor use the newly installed NGNIX.

Code

cd usr/local/emps/sbin/

## make a back up of the old one.
mv nginx nginx_bnk

## create a symbolic link
ln -s /usr/sbin/nginx nginx

## do the restart of Virtualizor
/etc/init.d/virtualizor restart


Done... :D

now verify your newly fixed workaround
http://filippo.io/Heartbleed/
or
https://www.ssllabs.com/ssltest/

It should give green color on your website. :D
PS. This have been test on Virtualizor 2.4.3
IP: --   

Heartbleed workaround for Virtualizor
manekari
Posted on # April 12, 2014, 3:41 am | Post: 1
Group: Member
Post Group: Working Member
Posts: 212
Status:
Hello,

Thank you for taking time and responding with a solution for Heartbleed issue.

We do not recommend the manual update of OpenSSL as we maintain our own custom stack. We had released a fix yesterday which address and fixes the issue.

Your server's Virtualizor EMPS package needs to be updated. To update it, please follow http://www.virtualizor.com/blog/?p=577

Please let us know if you need any further information.

Regards,
Virtualizor Team.
IP: --   

« Previous    Next »

Threaded Mode | Print  



Jump To :


Users viewing this topic
1 guests, 0 users.


All times are GMT. The time now is April 28, 2024, 4:38 am.

  Powered By AEF 1.0.8 © 2007-2008 Electron Inc.Queries: 10  |  Page Created In:0.024