PHP updates for old Ubuntu 16.04  [SOLVED]

Locked
User avatar
Victor
Posts: 17
Joined: Sun 21. Jun 2020, 20:23

PHP updates for old Ubuntu 16.04

Post by Victor »

Hello,

I have vserver with server4you running KeyHelp 21.0 on Ubuntu 16.04.
Unfortunately s4you does not support OS upgrades on their Virtuozzo Vserver infrastructure (lame of them, but cheap)
The problem I'm having is that because of the old system, I cannot install other PHP versions from the KeyHelp Dashboard.
This is the error I'm getting in the PHP Interpreter tab in KeyHelp :

Code: Select all

Available interpreters
Here you see all available PHP interpreters, which could be installed on your server.

An error occurred.
Oh no, our repository server is currently not available.
We are going to fix this problem ASAP!

If you are using a recently released operating system, this message is normal 1-2 weeks after release,
due to the PHP interpreters have to been build first.

(Curl: SSL certificate problem: certificate has expired (https://repo.keyhelp.de/get_php_packages.php?os=ubuntu_16.04))
Does anyone know how to fix this without an OS upgrade which is currently impossible ?
From the error message it's obvious that it's a SSL problem, but I have no ideea where to get a valid cert and where to put it.

Thank you!
Something something, dark side.
User avatar
Alexander
Keyweb AG
Posts: 3811
Joined: Wed 20. Jan 2016, 02:23

Re: PHP updates for old Ubuntu 16.04  [SOLVED]

Post by Alexander »

Hello,

this has to do with Ubuntu 16 is too old and can not handle this change introduced by the Lets Encrypt Certificate Authority (our repo.keyhelp.de domain uses a Let's Encrypt certificate):

https://letsencrypt.org/2021/10/01/cert ... -help.html

To help you out, I have now removed the "DST Root CA X3" certificate from the certificate chain on the repo.keyhelp.de domain. You should now be able to use the PHP Interpreter tab again. Be advised, that this change will be reverted in a few days and I only can encourage you to switch to more up to date server to be able to use more recent KeyHelp versions and operating systems.
Mit freundlichen Grüßen / Best regards
Alexander Mahr

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
User avatar
Victor
Posts: 17
Joined: Sun 21. Jun 2020, 20:23

Re: PHP updates for old Ubuntu 16.04

Post by Victor »

Thank you very much Alexander, I was now able to install php 7.4 & php 8.0. All is working now, you can revert now to the previous expired chain, however I am curious why you would revert to an expired cert :) - this is one of the main reasons i forcefully migrated all my remaining i-MSCP servers to KeyHelp last week, there were just too many troubles with the expired DST Root CA X3
Something something, dark side.
User avatar
Alexander
Keyweb AG
Posts: 3811
Joined: Wed 20. Jan 2016, 02:23

Re: PHP updates for old Ubuntu 16.04

Post by Alexander »

This was not my decision ;) - It was the decision of the Let's Encrypt CA.
The expired DST Root CA X3 is part of all of their Let's Encrypts certificates since that date in October. After every renew of a Let's Encrypt certificate after 60-90 days is is back again. But only old systems are affected, so this seemed to be a nice opportunity for them to "remove" some outdated / and probably insecure devices from the market ;).
Mit freundlichen Grüßen / Best regards
Alexander Mahr

**************************************************************
Keyweb AG - Die Hosting Marke
Neuwerkstr. 45/46, 99084 Erfurt / Germany
http://www.keyweb.de - http://www.keyhelp.de
**************************************************************
Locked