Forum Moderators: coopster

Message Too Old, No Replies

SSL and PHP problem

upgrading server cause bad behavour in openssl functions

         

omoutop

7:34 am on Feb 12, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Hello all and thanks for any advice/tips.

We have a dedicated server (hosted away from company's offices).

Fact A
-----------------
Every summer we move part of our site/databases to a new one, because of the heavy traffic.
On September we returned the moved files back to our server.

Fact B
-----------
In some aplications we use openssl() functions to create keys for various users, to be able to encode/decode data.

The Problem
------------
Problem appeared this fall, when we couldn't create new users. Old ones were working normally, but new ones could not encrypt/decrypt their data.

Anyway, we didnt consider the subject a lot (because of reduced trafic on site) and forgot it, untill reently (when we do preperations for the upcoming season). We managed to track the error back, to an update of the php files on the server.
The openssl.cnf was corrupt due to a php upgrade to a new version (from 4.4.4 to 4.4.4-8+etch6 i think or somehting like that as a technician on the server told us).

Becasue of that we had to contact each user with an encrypted account and ask him to recrate his key/passphrase.

Question is:
-------------------
- is there a way to use an an cryption system, independed of the server files?
- portability is one issue sinc (see Fact A)
- compability is another issue (see Fact B)

note: i had try to use PGP in the past with no success on my part. I have no knowledge on protocols/files/folders or whatever is needed to run anythng on server. I always ask for the help of someone else, so any suggestion you provide (outside the php scope), better be in simple words :)

omoutop

7:08 am on Feb 22, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



anyone any ideas?