Curl Update
Aus HS Syswiki
(Unterschied zwischen Versionen)
Mrh (Diskussion | Beiträge) (→Prerequisites) |
Mrh (Diskussion | Beiträge) |
||
| Zeile 15: | Zeile 15: | ||
Copy the following RPMS to the Sever: | Copy the following RPMS to the Sever: | ||
<pre> | <pre> | ||
| − | scp libcurl4-7.44.0-1.1.x86_64.rpm tuxNN | + | scp libcurl4-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade |
| − | curl-7.44.0-1.1.x86_64.rpm tuxNN | + | scp curl-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade |
| − | curl-ca-bundle-7.44.0-1.1.x86_64.rpm tuxNN | + | scp curl-ca-bundle-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade |
</pre> | </pre> | ||
(only updating the ca bundle would not help because current curl cannot cope with hashing algorithms within the new bundle) | (only updating the ca bundle would not help because current curl cannot cope with hashing algorithms within the new bundle) | ||
| Zeile 23: | Zeile 23: | ||
Then update packages on the server: | Then update packages on the server: | ||
<pre> | <pre> | ||
| + | cd /usr/local/src/rpm/openssl_upgrade | ||
rpm -Uvh libcurl4-7.44.0-1.1.x86_64.rpm curl-7.44.0-1.1.x86_64.rpm curl-ca-bundle-7.44.0-1.1.x86_64.rpm | rpm -Uvh libcurl4-7.44.0-1.1.x86_64.rpm curl-7.44.0-1.1.x86_64.rpm curl-ca-bundle-7.44.0-1.1.x86_64.rpm | ||
</pre> | </pre> | ||
Version vom 19. August 2015, 13:53 Uhr
There's an issue when e.g. updating Joomla Plugins, curl cannot verify peer certificate because of an outdated CA Bundle. See here: https://github.com/joomla-extensions/weblinks/issues/79
To resolve and have an up-to-date CA-Certificate Bundle (and CURL library), it's necessary to update the Curl package. This can be done like this:
Prerequisites
OpenSSL Update must be done before as described here: http://syswiki.internet-license.net/index.php?title=Openssl_patch
Package "customopenssl" must be isntalled. Check with:
rpm -qa customopenssl
Update
Copy the following RPMS to the Sever:
scp libcurl4-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade scp curl-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade scp curl-ca-bundle-7.44.0-1.1.x86_64.rpm tuxNN:/usr/local/src/rpm/openssl_upgrade
(only updating the ca bundle would not help because current curl cannot cope with hashing algorithms within the new bundle)
Then update packages on the server:
cd /usr/local/src/rpm/openssl_upgrade rpm -Uvh libcurl4-7.44.0-1.1.x86_64.rpm curl-7.44.0-1.1.x86_64.rpm curl-ca-bundle-7.44.0-1.1.x86_64.rpm
