OpenLiteSpeed 1.4.18 SSL Broken !!!

#2
Hi Roottoor,

Is this a reproduce-able case on your end? If so, could you enable debug logging, reproduce the problem, and send us the debug log?
 
#4
Are you able to enable debug logging in Cloud Flare? Try to see why the response failed. Error code 520 is a default error for CloudFlare, so it doesn't really provide much information as to why the connection failed.
 
#5
Please submit a bug report to bug at litespeedtech dot com. Title it "OpenLiteSpeed crash" and in the message body, add a link to this thread, the system that you are running (Operating System, 32 or 64 bit, etc.), and attach your core file.

We will have someone take a look.
 
#6
that what server response before core dump
Code:
Cache-Control: private, no-cache, max-age=0
Pragma: no-cache
Connection: Close

<html><head><title>400 Bad Request</title></head><body>
<h2>HTTPS is required</h2>
<p>This is an SSL protected page, please use the HTTPS scheme instead of the plain HTTP scheme to access this URL.<br />
<blockquote>Hint: The URL should starts with <b>https</b>://</blockquote> </p>
<hr />
Powered By LiteSpeed Web Server<br />
<a href='http://www.litespeedtech.com'><i>http://www.litespeedtech.com</i></a>
</body></html>
 
#7
With your core file, please try running:

gdb /usr/local/lsws/bin/openlitespeed /tmp/lshttpd/bak_core/corefile
Once in gdb, run bt and send us what it says.

If you are unfamiliar with the command line, as I mentioned earlier, submit a bug report and we'll take a look at it.
 
#10
How did you install OLS?

We found the bug from your backtrace.

If you installed from source, I will let you know when the github is updated to include the fix. (you will just need to configure using original settings and make. Then copy the openlitespeed binary to the lsws bin. No need to make install).

If you installed via rpm, the time frame is not as clear, as there are some other changes that need to happen.
 
#12
If you are willing to try it, and are comfortable with the command line, you can try to create a new binary from source.

If not, as I mentioned, I'm not sure when the rpms will be updated.
 
#16
Hi roottoor,

The github is now updated.

Let me know if it helps,
Kevin
Hi!
all work just perfect :) Thanks!!!

little instruction for users, how to update openlitespeed bin file

PHP:
####### only for Centos 6  start #######

wget http://ftp.gnu.org/gnu/autoconf/autoconf-2.69.tar.gz
tar xvf autoconf-2.69.tar.gz
cd autoconf-2.69
./configure --prefix=/usr
make
sudo make install
cd ..


wget http://ftp.gnu.org/gnu/automake/automake-1.13.4.tar.gz
tar xvf automake-1.13.4.tar.gz
cd automake-1.13.4
./configure --prefix=/usr
make
sudo make install
cd ..


wget http://ftp.gnu.org/gnu/libtool/libtool-2.4.2.tar.gz
tar xvf libtool-2.4.2.tar.gz
cd libtool-2.4.2
./configure --prefix=/usr
make
sudo make install
cd ..

####### only for Centos 6  end #######


git clone https://github.com/litespeedtech/openlitespeed.git
cd openlitespeed
./configure --with-openssl=/usr --enable-http2
make


mv /usr/local/lsws/bin/openlitespeed /usr/local/lsws/bin/openlitespeed.backup
cp ./src/openlitespeed /usr/local/lsws/bin/openlitespeed

service lsws restart
 
Top