php is using an outdated version of curl and openssl

aaP_matheusrufinosouza

The server has curl version 8.5.0 installed but PHP is using version 7.74.0 and this is causing problems in WordPress, more specifically in WooCommerce.

curl on serve

curl on php

aaPanel_Kern

Hello,
Is there any specific error message?

aaP_matheusrufinosouza

This message:

error:14094410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure

It is occurring in several parts of WordPress, in addition to WooCommerce, but the worst area is the store's checkout, which is integrated with a payment gateway and returns an error when trying to complete a purchase.

aaPanel_Kern

Hello,
What is the version of WooCommerce used? Is the website configured with SSL? Is the URL configured in the website backend the same as the address you visited?

aaP_matheusrufinosouza

The WooCommerce version is 10.0.4.
Yes, the website is configured with SSL.
Yes, the URL configured in the WordPress backend is exactly the same as the one I use to access the site, including the HTTPS protocol and domain name.

This mismatch (curl on Server 8.5.0 and in php 7.74.0) appears to be causing SSL handshake failures. Could this version mismatch be the root cause of the problem?
Is there a way to update the cURL version used by PHP through aaPanel?

aaPanel_Kern

Hello,
This curl will not affect
can you give us your aapanel information? The server makes a snapshot backup first, if possible, please send it to kern@aapanel.com.
It is recommended to fill in the following
Post link:
SSH IP address, account password and port:
aapanel login link address and account password:
Detailed problem description:

No post link will not be able to know which user's information is, and the problem will not be processed

aaP_matheusrufinosouza

Hello

Is there any other alternative to accessing via SSH? I have many clients and services running on the server. For data privacy reasons, I can't allow such access.

aaPanel_Kern

aaP_matheusrufinosouza
https://www.ssllabs.com/ssltest/
Check whether SSLv3 is enabled and TLS 1.0 is enabled?

aaP_matheusrufinosouza

Look. What can be done? Any suggestions?

aaP_matheusrufinosouza

I ran a test by running WordPress on the server via Docker and testing the same site that's having issues.

In wp-toolkit, which uses PHP compiled from the panel with curl 7.74.0, OpenSSL/1.1.1o continues to cause the issue.

In Docker/WordPress with curl 7.88.1, OpenSSL/3.0.14 worked perfectly.

I believe the aaPanel PHP installation needs to be fixed because it's pulling in these outdated modules.

aaPanel_Kern

Hello,
PHP is used to install quickly, are you?

aaP_matheusrufinosouza

aaPanel_Kern

Trying to install php8.3 in compile mode, it may be caused by the openssl version used during quick installation

aaPanel_Kern

aaP_matheusrufinosouza

Hi, sorry for the delay, but I had to migrate my client to another dashboard because they were losing sales.

Could you tell me how to do the compiled installation?

aaPanel_Kern

Hello,
When installing php, select Compile install

aaP_matheusrufinosouza

What should I fill in here?

And here?

I need php to come with curl 7.88.1 at least and OpenSSL/3.0.14

aaPanel_Kern

Hello, usually by default, no module is needed

aaP_matheusrufinosouza