The Perfect Server - Debian 9 (Stretch) - Add PHP 5.3?

JohnnyBeGood · Oct 12, 2017

ztk.me said: ↑

Why doesn't it support Debian 9? Does it have issues with the new apache syntax maybe? Anyway,
yes you can install jessie like in the tutorial. Maybe have a look at https://www.proxmox.com/
Click to expand...

Thanks for the reply!

This is their response regarding Debian 9:

we found out that there is a incompatibility between the shell interpreter in Debian (9.2 specifically), and one of the functions in Centova Cast's BASH library.

Our developers are already apprised of this issue, but unfortunately there isn't a quick fix, and thus you may need to wait for a while before you can install Centova Cast on your Debian 9 system.
Click to expand...

I already have working ESXi 6.5 and can install VMs so I will delete Debian 9 and create Debian 8 VM.
Quick question, VM that is available from https://www.howtoforge.com/list-of-downloadable-vmware-images
is Debian 8 is it ok to do
apt-get dist-upgrade so that it upgrades to Debian 8.8? will it mess up ie. PHP 5.3?

till · Oct 12, 2017

Just use "apt-get update && apt-get upgrade" to update within the debian 8.x versions. Dist upgrades are needed when you want to update from Debian 8 to 9.

Debian 8.9 ships with 5.6.30-0+deb8u1 at the moment as far as I know and not PHP 5.3.

ztk.me · Oct 12, 2017

if you've compiled php 5.3 on that machine and do dist-upgrade ( which is safe if you have the specific release name in your sources.list and no shortcuts like "stable" ) and parts are upgraded like zlib-dev or graphic libraries and who knows what - you should recompile against newer versions usually.

JohnnyBeGood · Oct 12, 2017

till said: ↑

Just use "apt-get update && apt-get upgrade" to update within the debian 8.x versions. Dist upgrades are needed when you want to update from Debian 8 to 9.

Debian 8.9 ships with 5.6.30-0+deb8u1 at the moment as far as I know and not PHP 5.3.
Click to expand...

Thanks for providing those commands, I need to update to 8.x

So I cannot follow this tutorial to get PHP 5.3?
https://www.howtoforge.com/how-to-u...pm-and-fastcgi-with-ispconfig-3-debian-wheezy

ztk.me · Oct 12, 2017

you can adapt the patches / addons from what I've written for stretch and what I've written in
https://www.howtoforge.com/communit...bian-9-stretch-add-php-5-3.77549/#post-366549
"in chroot do" part and get the rest together from that howto.

JohnnyBeGood · Oct 13, 2017

Thanks! I will tackle this in the next couple of days.

ztk.me · Oct 13, 2017

let us know if you have any issues

JohnnyBeGood · Oct 13, 2017

ztk.me said: ↑

let us know if you have any issues
Click to expand...

I sure will Hope I will have to report good news with no issues!

ztk.me · Oct 13, 2017

I thought about scanning redhat repo and debian source packages if I can find some more interesting patches missing in upstream maybe, but not today anymore.

JohnnyBeGood · Oct 13, 2017

ztk.me said: ↑

I thought about scanning redhat repo and debian source packages if I can find some more interesting patches missing in upstream maybe, but not today anymore.
Click to expand...

Relax, its weekend! You deserve it

ztk.me · Oct 13, 2017

hmm yeah I might do some actual work aswell but still, I love this kind of stuff

JohnnyBeGood · Oct 17, 2017

ztk.me said: ↑

done

if you need postgresql-support, additional steps needs to be done ( compile libpsql with openssl 1.0.2 )
change the -j4 at make commands to approximal your cpu cores

Code:

apt-get install libbz2-dev libxml2-dev libcurl4-openssl-dev libjpeg-dev libpng-dev libxpm-dev libfreetype6-dev libc-client2007e-dev libkrb5-dev libmcrypt-dev libpq-dev libmariadbclient-dev-compat build-essential libxml2-dev libcurl4-openssl-dev libpcre3-dev libbz2-dev libjpeg-dev libpng-dev libfreetype6-dev libmcrypt-dev libmhash-dev freetds-dev libmariadbclient-dev-compat unixodbc-dev libxslt1-dev libfcgi-dev libfcgi0ldbl libmcrypt-dev libssl-dev

Code:

mkdir /usr/local/src/openssl
cd /usr/local/src/openssl
wget https://www.openssl.org/source/openssl-1.0.2l.tar.gz
tar xf openssl-1.0.2l.tar.gz
cd openssl-1.0.2l
./config shared --openssldir=/usr/local/openssl/ enable-ec_nistp_64_gcc_128
make depend
make -j4
make install
ln -s /usr/local/openssl/lib /usr/local/openssl/lib/x86_64-linux-gnu

Code:

mkdir /usr/local/src/curl
cd /usr/local/src/curl
wget https://curl.haxx.se/download/curl-7.56.0.tar.gz
tar xf curl-7.56.0.tar.gz
cd curl-7.56.0
env PKG_CONFIG_PATH=/usr/local/openssl/lib/pkgconfig LDFLAGS=-Wl,-rpath=/usr/local/openssl/lib ./configure --with-ssl=/usr/local/openssl --with-zlib --prefix=/usr/local/curl
make  -j4
make install

Code:

mkdir /usr/local/imap
cd /usr/local/imap
wget http://http.debian.net/debian/pool/main/u/uw-imap/uw-imap_2007f\~dfsg-5.dsc
wget http://http.debian.net/debian/pool/main/u/uw-imap/uw-imap_2007f\~dfsg.orig.tar.gz
wget http://cdn-fastly.deb.debian.org/debian/pool/main/u/uw-imap/uw-imap_2007f~dfsg-5.debian.tar.xz
dpkg-source -x uw-imap_2007f~dfsg-5.dsc
cd uw-imap-2007f~dfsg/
touch {ipv6,lnxok}
## make process will fail, however it generates what we need, still
make slx SSLINCLUDE=/usr/local/openssl/include/ SSLLIB=/usr/local/openssl/lib EXTRAAUTHENTICATORS=gss
mkdir lib include
cp c-client/*.c lib/
cp c-client/*.h include/
cp c-client/c-client.a lib/libc-client.a
ln -s /usr/lib/libc-client.a /usr/lib/x86_64-linux-gnu/libc-client.a

Code:

mkdir /opt/php-5.3.29
mkdir /usr/local/src/php5-build
cd /usr/local/src/php5-build
wget http://de.php.net/get/php-5.3.29.tar.bz2/from/this/mirror -O php-5.3.29.tar.bz2
tar jxf php-5.3.29.tar.bz2

optional suhoshin-patch

Code:

cd /usr/local/src/php5-build
wget https://download.suhosin.org/suhosin-patch-5.3.9-0.9.10.patch.gz
gunzip suhosin-patch-5.3.9-0.9.10.patch.gz
cd php-5.3.29
patch -p 1 -i ../suhosin-patch-5.3.9-0.9.10.patch
## the failed hunks are the visible notes it was build with suhoshin patch, no worries

if you did not patch do

Code:

cd php-5.3.29/

continue

Code:

LDFLAGS="-Wl,-rpath=/usr/local/openssl/lib,-rpath=/usr/local/curl/lib" ./configure --with-config-file-path=/etc/php/5.3/php.ini --with-config-file-scan-dir=/etc/php/5.3/mods-enabled --prefix=/opt/php-5.3.29 --with-zlib-dir --with-freetype-dir --enable-mbstring --with-xpm-dir=/usr --with-libxml-dir=/usr --enable-soap --enable-calendar --with-curl=/usr/local/curl --with-mcrypt --with-zlib --with-gd --disable-rpath --enable-inline-optimization --with-bz2 --with-zlib --enable-sockets --enable-sysvsem --enable-sysvshm --enable-pcntl --enable-mbregex --with-mhash --enable-zip --with-pcre-regex --with-mysql --with-pdo-mysql --with-mysqli --with-jpeg-dir=/usr --with-png-dir=/usr --enable-gd-native-ttf --with-openssl=/usr/local/openssl --with-imap=/usr/local/imap/uw-imap-2007f~dfsg --with-kerberos --with-imap-ssl --with-fpm-user=www-data --with-fpm-group=www-data --with-libdir=lib/x86_64-linux-gnu --enable-ftp --with-gettext --enable-fpm
LDFLAGS="-Wl,-rpath=/usr/local/openssl/lib,-rpath=/usr/local/curl/lib" make -j4
make install

Code:

mkdir -p /etc/php/5.3/fpm/pool.d
mkdir /etc/php/5.3/mods-enabled

be aware that session-id calculation can be pretty easy guessed by attackers under circumstances and the default entropy-length is way to low.
This options have been superseeded in php 7 and are not avail but in 5.3 they're empty / not used by default, double-check.
a value of 32 for entropy_length is known to be too small, it's up to you
session.entropy_file
session.entropy_length

Code:

cd /usr/local/src/php5-build/php-5.3.29
cp php.ini-production php.ini
sed -i 's/^\(short_open_tag\s*=\s*\).*$/\1On/' php.ini
sed -i 's/^\(expose_php\s*=\s*\).*$/\1Off/' php.ini
sed -i 's/^\(default_socket_timeout\s*=\s*\).*$/\110/' php.ini
sed -i 's/^\(;date\.timezone\s*=\s*\).*$/date\.timezone="Europe\/Berlin"/' php.ini
sed -i 's/^\(session\.cookie_httponly\s*=\s*\).*$/\11/' php.ini
sed -i 's/^\(session\.hash_function\s*=\s*\).*$/\11/' php.ini
sed -i 's/^\(session\.hash_bits_per_character\s*=\s*\).*$/\16/' php.ini
sed -i 's/^\(disable_functions\s*=\s*\).*$/\1pcntl_alarm,pcntl_fork,pcntl_waitpid,pcntl_wait,pcntl_wifexited,pcntl_wifstopped,pcntl_wifsignaled,pcntl_wifcontinued,pcntl_wexitstatus,pcntl_wtermsig,pcntl_wstopsig,pcntl_signal,pcntl_signal_dispatch,pcntl_get_last_error,pcntl_strerror,pcntl_sigprocmask,pcntl_sigwaitinfo,pcntl_sigtimedwait,pcntl_exec,pcntl_getpriority,pcntl_setpriority,/' php.ini
cp php.ini /etc/php/5.3/

/etc/php/5.3/fpm/php-fpm.conf ( see attached php-fpm.conf.txt )
/etc/php/5.3/fpm/pool.d/www.conf ( see attached www.conf.txt )
/etc/init.d/php5.3-fpm ( see attached php5.3-fpm.txt )
/lib/systemd/system/php5.3-fpm.service ( see attached php5.3-fpm.service.txt )

optional Install APC

Code:

mkdir /usr/local/src/php5-build/apc
cd /usr/local/src/php5-build/apc
wget http://pecl.php.net/get/APC -O 3.1.13.tar.gz
tar xf 3.1.13.tar.gz
cd APC-3.1.13/
/opt/php-5.3.29/bin/phpize
./configure --with-php-config=/opt/php-5.3.29/bin/php-config
make -j4
make install

/etc/php/5.3/mods-enabled/apc.ini

Code:

extension=/opt/php-5.3.29/lib/php/extensions/no-debug-non-zts-20090626/apc.so
apc.enabled=1
apc.shm_size=128M
apc.ttl=0
apc.gc_ttl=600
apc.enable_cli=1
apc.mmap_file_mask=/tmp/apc.XXXXXX

optional suhoshin extension ( it's not the same as the patch! )

Code:

mkdir /usr/local/src/php5-build/suhoshin
cd /usr/local/src/php5-build/suhoshin
wget https://download.suhosin.org/suhosin-0.9.37.1.tar.gz
tar xf suhosin-0.9.37.1.tar.gz
cd suhosin-0.9.37.1
/opt/php-5.3.29/bin/phpize
./configure --with-php-config=/opt/php-5.3.29/bin/php-config
make
make install
echo "extension=suhosin.so" > /etc/php/5.3/mods-enabled/suhoshin.ini

see https://suhosin.org/stories/configuration.html for options

Code:

ln -s /opt/php-5.3.29/bin/php /usr/bin/php5.3
ln -s /opt/php-5.3.29/sbin/php-fpm /usr/sbin/php-fpm5.3
update-alternatives --install /usr/bin/php php /usr/bin/php5.3 0

Code:

chmod +x /etc/init.d/php5.3-fpm
update-rc.d php5.3-fpm defaults

check/set your default system php

Code:

update-alternatives --config php

Code:

systemctl enable php5.3-fpm.service
systemctl daemon-reload
systemctl restart php5.3-fpm.service

go to System > Additional PHP Versions in ISPConfig and compare to attached Picture

No cgi, please don't use cgi!

for TLS usage in this version, there has been a discussion:
https://bugs.php.net/bug.php?id=65329

edit: added suhoshin patch
edit: added suhoshin extension
edit: added some disable_functions
edit: tls hint

Click to expand...

Hi,
I started to follow your instructions to install PHP 5.3 from this post (btw, I don't need postgresql support) and I ran into first trouble, do I need to add something to /etc/apt/sources.list ?

Code:

root@debian:~# apt-get install libbz2-dev libxml2-dev libcurl4-openssl-dev libjpeg-dev libpng-dev libxpm-dev libfreetype6-dev libc-client2007e-dev libkrb5-dev libmcrypt-dev libpq-dev libmariadbclient-dev-compat build-essential libxml2-dev libcurl4-openssl-dev libpcre3-dev libbz2-dev libjpeg-dev libpng-dev libfreetype6-dev libmcrypt-dev libmhash-dev freetds-dev libmariadbclient-dev-compat unixodbc-dev libxslt1-dev libfcgi-dev libfcgi0ldbl libmcrypt-dev libssl-dev
Reading package lists... Done
Building dependency tree      
Reading state information... Done
Note, selecting 'libpng12-dev' instead of 'libpng-dev'
Note, selecting 'libpng12-dev' instead of 'libpng-dev'
E: Unable to locate package libmariadbclient-dev-compat
E: Unable to locate package libmariadbclient-dev-compat
root@debian:~#

ztk.me · Oct 17, 2017

I think there was a misunderstanding.
For Debian 8 I meant to use the "within chroot" part of my previous post
https://www.howtoforge.com/communit...bian-9-stretch-add-php-5-3.77549/#post-366549
+ you can use ( paths may differ ) optional suhoshin-patch APC suhoshin-addon from the other part.

If you still have issues, I could make the same I did for Debian 9 for Debian 8 in a new complete howto-like post?

JohnnyBeGood · Oct 17, 2017

ztk.me said: ↑

I think there was a misunderstanding.
For Debian 8 I meant to use the "within chroot" part of my previous post
https://www.howtoforge.com/communit...bian-9-stretch-add-php-5-3.77549/#post-366549
+ you can use ( paths may differ ) optional suhoshin-patch APC suhoshin-addon from the other part.

If you still have issues, I could make the same I did for Debian 9 for Debian 8 in a new complete howto-like post?
Click to expand...

That would be awesome if you could make howto post for Debian 8.9! I have to stick with 8 because I can't go with 9 due to Centova Cast compatibility. Thanks for your time!

JohnnyBeGood · Oct 26, 2017

Hi,

Can someone please post how-to add PHP 5.3 for Debian 8.9?

ztk.me · Jul 16, 2018

ah man totally forgot this - can't promise anything but I keep a note

JohnnyBeGood · Jul 16, 2018

ztk.me said: ↑

ah man totally forgot this - can't promise anything but I keep a note
Click to expand...

No worries. I had someone help me get it to work with PHP 7. Thanks for the reply!

Log in or Sign up

The Perfect Server - Debian 9 (Stretch) - Add PHP 5.3?

JohnnyBeGood Member

till Super Moderator Staff Member ISPConfig Developer

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

Share This Page

Log in or Sign up

The Perfect Server - Debian 9 (Stretch) - Add PHP 5.3?

JohnnyBeGood Member

till Super Moderator Staff Member ISPConfig Developer

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

JohnnyBeGood Member

ztk.me Well-Known Member HowtoForge Supporter

JohnnyBeGood Member

Share This Page

Useful Searches