1.4.37 SSL issue

Yo,
It seems there is some sort of bug in 1.4.37. It has something to do with SSL, while im a noob and cant tell you what is it, I can tell you how to reproduce it.

Fresh install, CentOS 7 minimal, 1.4.37 was recently released this week, so its automatically downloaded and installed, continue as always, setup a site, WP, DNS etc.
Once site is up, i was spamming refresh with ‘inspect’ measuring load times, but on https, after ~10x quick F5 its just crashing/freezing for 10-30s with timed out error. Tried to look for some logs on the server, but as I said, im a noob. HTTP works perfectly fine.

Rolled back to 1.4.36 and this issue doesnt exist.

Found this SSL Fails at 1.4.36 and 1.4.35 | OpenLiteSpeed Community and News
But 1.4.36 is also affected? Not for me tho. Just letting you know.

Will investigate further, thank you for pointing it out.

Did you test this in different browsers?

Opera, Chrome, FF. I’m doing fresh install right now, wanna mess with TLS1.1-1.3 disabling etc.

Is there actually a way to downgrade OLS after CP install?

The usual way, using yum.

You mean yum remove openlitespeed and install ols-1.4.36?

Ok, its weird. Fresh install, https works flawlessly, the moment I turn css/js minifaction, all minified files are “404”, but it still works fine, no crashes. /Permission issue?

When I turn on HTTP2 PUSH in LS Plugin, its going south and it start crashing.

Hello !

yum install pcre-devel openssl-devel expat-devel geoip-devel zlib-devel udns-devel git gcc gcc-c++ make autoconf glibc rcs cmake golang libtool libmaxminddb  -y
wget https://openlitespeed.org/packages/openlitespeed-1.5.0rc4.tgz
tar xzvf openlitespeed-1.5.0rc4.tgz
cd openlitespeed-*
git clone https://boringssl.googlesource.com/boringssl
cd boringssl
mkdir build
cd build
cmake ..
make
cd ../..
./configure --prefix=/usr/local/lsws
make
make install

systemctl daemon-reload
systemctl restart lsws

This solve my issue.
And i had to enable “Use Server Index Files - Yes”, on General tab in Virtual hosts inside the server to fix 404 on permalinks, gg.
Maybe it will help someone, peace out ; ).

Hello !

yum install pcre-devel openssl-devel expat-devel geoip-devel zlib-devel udns-devel git gcc gcc-c++ make autoconf glibc rcs cmake golang libtool libmaxminddb  -y
wget https://openlitespeed.org/packages/openlitespeed-1.5.0rc4.tgz
tar xzvf openlitespeed-1.5.0rc4.tgz
cd openlitespeed-*
git clone https://boringssl.googlesource.com/boringssl
cd boringssl
mkdir build
cd build
cmake ..
make
cd ../..
./configure --prefix=/usr/local/lsws
make
make install

systemctl daemon-reload
systemctl restart lsws

This solve my issue.
And i had to enable “Use Server Index Files - Yes”, on General tab in Virtual hosts inside the server to fix 404 on permalinks, gg.
Maybe it will help someone, peace out ; ).

It would definitely help someone, there are some issues with OpenSSL for now, will be sorted out soon.

Well, all credits goes to Usman/Nasir, as i just went ALL IN with this

./configure --prefix=/usr/local/lsws

I couldnt comprehend fully where to copy what etc. and it got so messy at some point, that i had to use vps snapshots to start again few times.

I’ve read somewhere, that RC4 is kinda SSL bug free, but RC5 reintroduce the bug again.

yum install pcre-devel openssl-devel expat-devel geoip-devel zlib-devel udns-devel git gcc gcc-c++ make autoconf glibc rcs cmake golang libtool libmaxminddb  -y
wget https://openlitespeed.org/packages/openlitespeed-1.4.36.tgz
tar xzvf openlitespeed-1.4.36.tgz
cd openlitespeed-*
git clone https://boringssl.googlesource.com/boringssl
cd boringssl
mkdir build
cd build
cmake ..
make
cd ../..
./configure --prefix=/usr/local/lsws
make
make install

systemctl daemon-reload
systemctl restart lsws

Guys, if someone has the same issue as me, use this one, not the one from the top of this topic. This will downgrade to 1.4.36, which is a safe spot i think, cheers!

After upping to 1.5.0rc4 cerbot stopped working. I will try downing to 1.4.36 today.

Hey, I’m not sure if it apply to cyberpanel, but there is a limit of request for SSL from certbot, 5 per week per domain. Not sure if it stopped working or you hit the limit.