This document explains how to install the PSoft build of Apache v.3.1.27 security update on any version
of H-Sphere.
Requirements
If you are running apache version 1.3.26, no requirement conflict should appear.
If you are running apache prior to 1.3.26, make sure to have the following installed
on the web server(s):
- postgresql-libs (libpg.so.2)
- mysql-client (libmysqlclient.so.10)
- libpng (libpq.so.2)
- libjpeg (libjpeg.so.62)
- openssl (libssl.so.0.9.6, libcrypto.so.0.9.6)
These files are usually located in:
/usr/lib for Linux and
/usr/local/lib for FreeBSD.
Upgrade procedure
This procedure explains how to install 1.3.27 apache security upgrade
on all servers with standard apache installations, including control
panel server, web servers, and mail servers. Once you complete the below
steps on the control panel server, don't repeat them on the web and
mail servers.
- Log into your control panel server as root:
su -
- Download the apache package from the psoft site:
wget http://www.psoft.net/shiv/apache/u-apache-1_3_27.tgz
- Unpack the contents of the downloaded archive:
tar zxf u-apache-1_3_27.tgz
- Enter the unpacked directory:
cd u-apache-1_3_27
- If you (1) don't have custom apache modules and (2) don't use Tomcat, simply install the update:
make install
and you're done.
Subsequent steps must be taken only by those who have custom apache modules
and those who use Tomcat as the control panel web server:
- Type make boxes. This will generate two files, list_webmails.txt
and list_webs.txt with IPs of your servers running apache.
- Open each of these two files and remove the IPs of servers with custom
apache. These servers won't get upgraded.
- Type make apachecp to update apache on the control panel server.
If you have a Tomcat installation, skip this step.
- Type make apacheweb to update apache on web servers.
- Type make apachelite to update apache on all mail servers.
If you have a one-box installation, skip this step.
Backups
The old data is backed up into the /hsphere/local/backup directory:
mail-apache-TIMESTAMP - for webmail apache
apache-TIMESTAMP - for apache
cpapache-TIMESTAMP - for cp apache
where TIMESTAMP is unix timestamp of when the update was perfomed.
|