CentOS 6 Curl update

Issues related to applications and software problems
Post Reply
Kinetal
Posts: 4
Joined: 2017/09/13 10:43:43

CentOS 6 Curl update

Post by Kinetal » 2017/09/13 10:47:29

I am running a VPS with CentOS 6 installed. I have updated curl and libcurl from city fans repo as the official repo doesn't have the updated curl.

PHP is still running the old curl

Code: Select all

/opt/curlssl/bin/curl -V
curl 7.38.0 (x86_64-unknown-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.0 zlib/1.2.3 libidn/1.18 Protocols: dict file ftp ftps gopher http https imap imaps pop3 pop3s rtsp smtp smtps telnet tftp Features: IDN IPv6 Largefile NTLM NTLM_WB SSL libz
the new curl is located here

Code: Select all

/usr/bin/curl -V
curl 7.55.1 (x86_64-redhat-linux-gnu) libcurl/7.55.1 OpenSSL/1.0.1e zlib/1.2.3 c-ares/1.13.0 libssh2/1.8.0 nghttp2/1.6.0 Release-Date: 2017-08-14 Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtsp scp sftp smb smbs smtp smtps telnet tftp Features: AsynchDNS IPv6 Largefile GSS-API Kerberos SPNEGO NTLM NTLM_WB SSL libz HTTP2 UnixSockets HTTPS-proxy
Can I simply replace the curl and curl-config files in /opt/curlssl/bin/curl with the new updated ones?

phpinfo() still outputs the old curl and I can't find anyway of pointing php to look at the new directory so backing up the original curl files and replacing with the new ones is all I can think of but it's a production server so I don't want to risk messing anything up.

I've also read that PHP needs to be recompiled with the new curl directory but I'm unsure on how to do this?

Any advice is greatly appreciated.

Thanks

User avatar
avij
Retired Moderator
Posts: 3046
Joined: 2010/12/01 19:25:52
Location: Helsinki, Finland
Contact:

Re: CentOS 6 Curl update

Post by avij » 2017/09/13 10:54:47

I'm afraid you are on your own here. We support what we ship, and you are not using the CentOS-provided version of curl.

Was there some particular reason to not use the curl that CentOS ships?

Kinetal
Posts: 4
Joined: 2017/09/13 10:43:43

Re: CentOS 6 Curl update

Post by Kinetal » 2017/09/13 11:20:20

cURL 7.38 is using OpenSSL/1.0.0 which doesn't seem to support TLS 1.2 and when running rum update curl or yum update libcurl using the official repo it states that there are no updates.

Payment gateways such as PayPal and Stripe require cURL TLS 1.2 support and the update procedure seems to be a common issue when searching on Google.

tunk
Posts: 1205
Joined: 2017/02/22 15:08:17

Re: CentOS 6 Curl update

Post by tunk » 2017/09/13 11:52:17

On my CentOS 6.9 /opt is empty and:

Code: Select all

/usr/bin/curl -V
curl 7.19.7 (x86_64-redhat-linux-gnu) libcurl/7.19.7 NSS/3.27.1 zlib/1.2.3 libidn/1.18 libssh2/1.4.2
Protocols: tftp ftp telnet dict ldap ldaps http file https ftps scp sftp 
Features: GSS-Negotiate IDN IPv6 Largefile NTLM SSL libz 
You could try and see if it works, just first make a backup of /opt/curlssl/bin/curl.

User avatar
TrevorH
Site Admin
Posts: 33202
Joined: 2009/09/24 10:40:56
Location: Brighton, UK

Re: CentOS 6 Curl update

Post by TrevorH » 2017/09/13 12:13:59

We don't ship curl 7.38 and nothing that we ship as part of the main distro installs under /opt.

Our curl is curl-7.19.7-53.el6_9.x86_64 and has a --tlsv1.2 switch and works with sites requiring TLS 1.2.
The future appears to be RHEL or Debian. I think I'm going Debian.
Info for USB installs on http://wiki.centos.org/HowTos/InstallFromUSBkey
CentOS 5 and 6 are deadest, do not use them.
Use the FAQ Luke

Post Reply