Old Website mod_ssl problem

General support questions
Post Reply
cgokan
Posts: 34
Joined: 2016/12/07 13:11:56

Old Website mod_ssl problem

Post by cgokan » 2021/09/23 08:24:03

Hello

I have a very old server. It's running Centos 6.9. (end of life) "mod_ssl" for httpd is not installed. The package I need is "mod_ssl-2.2.15-69.el6.centos.x86_64.rpm". Or I need a library file that I can load manually. Can you help with this? (Website PHP5.4. We can't migrate it for now. Too many old settings. We can't update it either. )


Thanks.

User avatar
TrevorH
Site Admin
Posts: 33191
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: Old Website mod_ssl problem

Post by TrevorH » 2021/09/23 08:38:46

You really do need to get off CentOS 6 ASAP. It went EOL nearly a year ago and there are already high severity vulnerabilities discovered that allow root compromise. Those will never be fixed. At the very least you should update to the latest CentOS 6 that there is, 6.10 plus all subsequent fixes released up to Nov 2020 when it died.

All the packages for CentOS 6.10 have been moved to vault.centos.org so you need to edit the various /etc/yum.repos.d/*.repo files and adjust them. Comment out the mirrorlist= line for the base, updates and extras repos and uncomment the baseurl= line below it. Change the baseurl= line to point to http://vault.centos.org/ instead of mirror.centos.org. You may also need to adjust the path that follows it but you can point your web browser to vault and drill down the directory structure to get the right names. Once you've done that, you can then yum install mod_ssl and you should also yum update to pick up any other fixes that you are missing. That does at least get you as protected as you can be when running an obsolete operating system.

CentOS 7 has php 5.4.16 in the base repo and is maintained until 2024.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

cgokan
Posts: 34
Joined: 2016/12/07 13:11:56

Re: Old Website mod_ssl problem

Post by cgokan » 2021/09/23 18:55:29

Hello

I've added the repos below. Worked. :)

Code: Select all

# cat /etc/yum.repos.d/CentOS-Base.repo
[C6.10-base]
name=CentOS-6.10 - Base
baseurl=http://vault.centos.org/6.10/os/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.10-updates]
name=CentOS-6.10 - Updates
baseurl=http://vault.centos.org/6.10/updates/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.10-extras]
name=CentOS-6.10 - Extras
baseurl=http://vault.centos.org/6.10/extras/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=1
metadata_expire=never

[C6.10-contrib]
name=CentOS-6.10 - Contrib
baseurl=http://vault.centos.org/6.10/contrib/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never

[C6.10-centosplus]
name=CentOS-6.10 - CentOSPlus
baseurl=http://vault.centos.org/6.10/centosplus/$basearch/
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-CentOS-6
enabled=0
metadata_expire=never


Post Reply