Einen Überblick über das Administrationstool KeyHelp der Keyweb AG und dessen Download gibt es auf https://www.keyhelp.de

Dieses Forum soll es interessierten Benutzern ermöglichen, sich über KeyHelp auszutauschen und Hilfe bei Problemen zu finden.

PHP updates for old Ubuntu 16.04  [SOLVED]

You found a bug? Please tell us about.
Antworten
Benutzeravatar
Victor
Beiträge: 13
Registriert: So 21. Jun 2020, 20:23

PHP updates for old Ubuntu 16.04

Beitrag von Victor »

Hello,

I have vserver with server4you running KeyHelp 21.0 on Ubuntu 16.04.
Unfortunately s4you does not support OS upgrades on their Virtuozzo Vserver infrastructure (lame of them, but cheap)
The problem I'm having is that because of the old system, I cannot install other PHP versions from the KeyHelp Dashboard.
This is the error I'm getting in the PHP Interpreter tab in KeyHelp :

Code: Alles auswählen

Available interpreters
Here you see all available PHP interpreters, which could be installed on your server.

An error occurred.
Oh no, our repository server is currently not available.
We are going to fix this problem ASAP!

If you are using a recently released operating system, this message is normal 1-2 weeks after release,
due to the PHP interpreters have to been build first.

(Curl: SSL certificate problem: certificate has expired (https://repo.keyhelp.de/get_php_packages.php?os=ubuntu_16.04))
Does anyone know how to fix this without an OS upgrade which is currently impossible ?
From the error message it's obvious that it's a SSL problem, but I have no ideea where to get a valid cert and where to put it.

Thank you!
Something something, dark side.
Benutzeravatar
Alexander
Keyweb AG
Beiträge: 2204
Registriert: Mi 20. Jan 2016, 02:23

Re: PHP updates for old Ubuntu 16.04  [SOLVED]

Beitrag von Alexander »

Hello,

this has to do with Ubuntu 16 is too old and can not handle this change introduced by the Lets Encrypt Certificate Authority (our repo.keyhelp.de domain uses a Let's Encrypt certificate):

https://letsencrypt.org/2021/10/01/cert ... -help.html

To help you out, I have now removed the "DST Root CA X3" certificate from the certificate chain on the repo.keyhelp.de domain. You should now be able to use the PHP Interpreter tab again. Be advised, that this change will be reverted in a few days and I only can encourage you to switch to more up to date server to be able to use more recent KeyHelp versions and operating systems.
Mit freundlichen Grüßen / Best regards
Alexander Mahr

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
Benutzeravatar
Victor
Beiträge: 13
Registriert: So 21. Jun 2020, 20:23

Re: PHP updates for old Ubuntu 16.04

Beitrag von Victor »

Thank you very much Alexander, I was now able to install php 7.4 & php 8.0. All is working now, you can revert now to the previous expired chain, however I am curious why you would revert to an expired cert :) - this is one of the main reasons i forcefully migrated all my remaining i-MSCP servers to KeyHelp last week, there were just too many troubles with the expired DST Root CA X3
Something something, dark side.
Benutzeravatar
Alexander
Keyweb AG
Beiträge: 2204
Registriert: Mi 20. Jan 2016, 02:23

Re: PHP updates for old Ubuntu 16.04

Beitrag von Alexander »

This was not my decision ;) - It was the decision of the Let's Encrypt CA.
The expired DST Root CA X3 is part of all of their Let's Encrypts certificates since that date in October. After every renew of a Let's Encrypt certificate after 60-90 days is is back again. But only old systems are affected, so this seemed to be a nice opportunity for them to "remove" some outdated / and probably insecure devices from the market ;).
Mit freundlichen Grüßen / Best regards
Alexander Mahr

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
Antworten