ssl module check failure but module versions are fine?

[aww+]

Unable to download: 599 - Net::SSLeay 1.49 must be installed for https support

perl module versions installed:
Net::SSLeay 1.54
IO::Socket::SSL 1.79_01

and yet SSL failure still occurs?

tiny.pm code shows this

Code: Select all

sub _assert_ssl {
    # Need IO::Socket::SSL 1.42 for SSL_create_ctx_callback
    die(qq/IO::Socket::SSL 1.42 must be installed for https support\n/)
        unless eval {require IO::Socket::SSL; IO::Socket::SSL->VERSION(1.42)};
    # Need Net::SSLeay 1.49 for MODE_AUTO_RETRY
    die(qq/Net::SSLeay 1.49 must be installed for https support\n/)
        unless eval {require Net::SSLeay; Net::SSLeay->VERSION(1.49)};
}

Are those hardcoded version 1.49 ? Or does it mean 1.49 or greater?

[aww+]

OH !!!

Might this have to do with how cpanel stupidly manages three copies of perl on the system?

I noticed the cpanel version of lfd has

#!/usr/local/cpanel/3rdparty/bin/perl

while the non-cpanel version has

#!/usr/bin/perl

So I bet I am updating ssleay on the system copy but not the cpanel "3rdparty" copy

Now to figure out how to update 3rdparty modules.

Sheesh cannot wait to get this last server off cpanel.

[aww+]

So would be be okay to change the copy of perl that csf/lfd uses on a cpanel server to the local copy?

Because apparently upgrading a module on cpanel's 3rdparty perl install is a workout.

Will csf/lfd automatic upgrades maintain the perl change on the first line or are they going to overwrite it when they detect cpanel?

[ForumAdmin]

It would be simpler if you changed the URLGET option from 1 to 2 which will then configure lfd to use LWP which should support SSL without issues.

[aww+]

looks like install.cpanel.sh does the change, twice for some reason

Code: Select all

if [ -e "/usr/local/cpanel/3rdparty/bin/perl" ]; then
	find ./ -type f -exec sed -i 's%^#\!/usr/bin/perl%#\!/usr/local/cpanel/3rdparty/bin/perl%' {} \;
fi

Code: Select all

if [ -e "/usr/local/cpanel/3rdparty/bin/perl" ]; then
    find ./ -type f -exec sed -i 's%^#\!/usr/local/cpanel/3rdparty/bin/perl%#\!/usr/bin/perl%' {} \;
fi

Could a local flag be set somewhere to tell CSF to not make this change?
Like the old buttons for the UI interface, touch a file somewhere to make CSF keep using /usr/bin/perl ?

[aww+]

It would be simpler if you changed the URLGET option from 1 to 2 which will then configure lfd to use LWP which should support SSL without issues.

Aha, much better idea, thank you.