upgrade openssl
Posted by: apptsung (---.nycmny.fios.verizon.net)
Date: October 09, 2015 03:43PM

We are using WAMP 2.5 64-bit. Unfortunately, this version failed to pass vulnerability scan.

The php version 2.5.12 has critical security bug and we have to upgrade to 2.5.30. We got this one done via the forum blog. Thanks.

The openssl version 1.0.1g also has critical security bug and we need to upgrade to 1.0.1p. We are hoping to use 1.0.1p. Does anyone have recommendation?

Finally, the apache version 2.4.9 also has major security bug and we need to upgrade to 2.4.14. I assume this is a much large project.

Any guidance would be greatly appreciated.

BTW - we are living in a world where passing vulnerability scan is a requirement.

Thanks,

apptsung

Options: ReplyQuote
Re: upgrade openssl
Posted by: RiggsFolly (---.as43234.net)
Date: October 09, 2015 05:15PM

Hi apptsung

Its really quite simple.

Copy down the version of Apache you want from Apachelounge windows builds

Unzip it

Exit wampserver

Copy the unzipped folders to `\wamp\bin\apache\apache{verionsNumber}\` using the same naming convention as used for the currect version.

Copy `\wamp\bin\apache\apache2.4.9\wampserver.conf` to `\wamp\bin\apache\apache{verionsNumber}\wampserver.conf`

Make sure you have the required MSVC C/C++ Runtime installed that this version of Apache requires.
- To be safe make sure you have MSVC 2008/2012/2013/2015, both 32bit and 64bit versions if you are on a 64bit windows.

WAMPerize the `httpd.conf` file.
- Compare the old httpd.conf file to the new one and make drive and path changes where required.
- Activate the module you require
- Make sure you have a LoadModule for the PHP interpreter as in old version



Restart wampserver
- You should now see the new version on the wampmanager -> Apache -> Version menu
- Click the new version on the above menu item
- Apache should restart, if you have done everything right
- Check the version using WAMPServers homepage.

If you have made mistakes, Click on the old version of Apache using wampmanager -> Apache -> Version
- Look at the Apache error log for reasons it does not start
- If that does not help, look at the Windows Event Viewer for messages from Apache It logs errors here if they happen before it can open its log files.

---------------------------------------------------------------------------------------------
(Windows 10 Pro 64bit) (Wampserver 3.3.4 64bit) Aestan Tray Menu 3.2.5.4
<Apache versions MULTIPE> <PHP versions MULTIPLE> <MySQL Versions MULTIPLE>
<MariaDB versions MULTIPLE> <phpMyAdmin versions MULTIPLE> <MySQL Workbench 8.0.23>

Read The Manuals Apache -- MySQL -- PHP -- phpMyAdmin
Get your Apache/MySQL/mariaDB/PHP ADDONs here from the WAMPServer alternate Repo
-X-X-X- Backup your databases regularly Here is How dont regret it later! Yes even when developing -X-X-X-

Options: ReplyQuote
Re: upgrade openssl
Posted by: apptsung (---.nycmny.fios.verizon.net)
Date: October 09, 2015 07:20PM

Hi RiggsFolly,

Thanks for this info and it is very helpful. I was planning to switch over the ApacheLounge version. With this, I can keep this WAMP setup.

Options: ReplyQuote


Sorry, only registered users may post in this forum.