mod_ssl 2.8.18 - fixes a security hole

all i did was

cd /usr/local/directadmin/customapache

./build clean

./build update (this does not grab the latest mod_ssl)

wget http://www.modssl.org/source/mod_ssl-2.8.18-1.3.31.tar.gz

pico -w build

change: MODSSL_VER=2.8.17
to: MODSSL_VER=2.8.18

./build apache_mod_sssl

restart apache: service httpd restart

all done, tested by

telnet localhost 80

typed GET / HTTP/1.0

then enter enter

and in that output will find the new mod_ssl version.

cheers

Thanks.

Updated successfully.

It's seems that John's CustomApache is not so updated, I have sent a email to John concerning this update.

you are quite welcome. i never even found it on any lists i was just browsing the mod_ssl page and saw the update and checked mine, and it was out of date, updated custom apache and it did not grab the new one so i just did it manually.

vandal said:

you are quite welcome. i never even found it on any lists i was just browsing the mod_ssl page and saw the update and checked mine, and it was out of date, updated custom apache and it did not grab the new one so i just did it manually.

Click to expand...

Maybe you are the first one noticing mod_ssl is upgraded.