That command will not indicate that the litespeed server installed on the server is OK.
I'm running openssl-0.9.8e, which is not vulnerable, but my litespeed server was still vulnerable, thus the release of 4.2.9 required to fix this.
Michael: I get the same timeout as JulesR after I upgraded to 4.2.9.
I use the Heartbleed CLI tool available here: https://github.com/FiloSottile/Heartbleed
Would like to confirm that this timeout is the expected response, for this test and a patch Litespeed.
Testing www.litespeedtech.com also...
some.host.com is a Virtual Host. It has a Web Server External App configured:
- Name: another.host.net
- Address: another.host.net:80
- Max Connections: 50
- Initial Request Timeout (secs): 2
- Retry Timeout (secs): 0
- Response Buffering: No
And it has Rewrite enabled with the following rule...
If there is no HTTP-X-Forwarded-For header, the client IP is logged, as it should.
I stopped using CloudFlare a while ago, and never disabled that option, and the correct IP addresses are logged for all requests.
Got it!
I grep-ed for 100M in lsws/conf/* and found it in Default.xml (and some other virtualhosts config files).
I removed the virtualhost-specific external apps and PHP script handlers (not sure why I had them!) That fixed the issue!
Thanks for the help.
The default config line worked; I was able to enable all modules with a LSPHP compiled with that.
But it's missing things I need, like curl, freetype, openssl... I'm going to try to find only the ones I need (difficult, since I run a lot of PHP apps on my server, and don't know exactly what they...
From phpinfo: memory_limit 768M (same as php.ini)
Same php.ini file on both servers.
No opcode cache enabled.
I tried to remove the 'shared' from my configure command. It didn't help.
Now I'm trying the default configure line that LSWS suggests.
I was able to make a simple PHP page load by disabling/enabling the following modules:
extension=gd.so
;extension=imap.so
;extension=ldap.so
extension=mbstring.so
;extension=mysqli.so
extension=mysql.so
;extension=pdo.so
;extension=pdo_mysql.so
;extension=pdo_pgsql.so...
I'm on a new dedicated server with more RAM (1.5GB) than my previous install which used the same modules (same php.ini). I was on Fedora before, with 1GB of RAM.
Now that I compare, I see that I compiled --with-pear, and --with-mime-magic, and without on my old server. I'll try to change those...