WebScHoLaR Dot NET

A blog discussing common issues of Linux, cPanel/WHM, Plesk, DirectAdmin, InterWorx

PCI Compliance tests declare openssl as vulnerable usually. The tests usually just compare the openssl version and do no check that whether those have been patched for that vulnerability or not. One possible way is to consult PCI scan company and let them know that the openssl version installed is a patched version and the vulnerability is fixed. The other way is to manually compile openssl and recompile Apache/PHP with newer openssl libraries. The steps mentioned below are for cPanel 11.x +.

Check where the existing openssl that comes with the OS is installed.

[root@Server ~]# whereis openssl
openssl: /usr/bin/openssl /usr/lib/openssl /usr/include/openssl /usr/share/man/man1/openssl.1ssl.gz

The above result shows that openssl is installed at /usr/bin path. So we will not replace it with manual installed version but we will install it at a different path at /usr/local. Read the rest of this entry »

We need to migrate the data from a server to a new server often and it can be because of several factors like

• Old server is having hardware issues and need to be replaced completely
• Server is being upgraded and full data needs to be transferred
• The servers are being transferred from one data center to another

and many more. This script can be used to migrate all user data and the cPanel config files from Old server to new Server. Read the rest of this entry »

If after upgrading the MySQL to higer version, PhpMyAdmin still reports the old MySQL version then following steps should be performed:

mv /usr/local/cpanel/lib/libmysqlclient.so.14 /usr/local/cpanel/lib/libmysqlclient.so.14.backup
ln -s /usr/lib/libmysqlclient.so.15.0.0 /usr/local/cpanel/lib/libmysqlclient.so.14

You may have experienced this issue that the Horde doesn’t login to the mailbox and on clicking the Login button, the page just refreshes and continue to load the same login page. The most possible reason is that the Horde session table is corrupt. I will explain step by step that how we can check and fix this session table issue. Read the rest of this entry »

A short bash command to update the serials for all the domains on the server. You can specify the new serial number and change the directory where the DNS zone files are present. I used this command when I performed bulk migrations.

for i in `ls /var/named/*.db` ; do cat $i | sed ‘s/[0-9]\{10\}/2008021901/g’ > $i.new; mv -f $i.new $i; chown named.named $i ;done