OLS V1.8.2 update and something about LSCache plugin

victoryel

2024-09-12

Server Core

[Security] Block “litespeed_role” cookie used for hacking LSCWP.
[Improvement] Move OSCP cache, status and rtreport to SHM location to reduce disk wearing.
[Improvement] Add support for QUIC stream priority.
[Bug Fix] Make Ruby application compatible with Ruby 3.3 and Rails 7.2
[Bug Fix] Fix per IP ACL and statistics.
[Bug Fix] More strict HTTP request validation.
[Bug Fix] Fix setting cookie via a rewrite rule.
[Bug Fix] Address issues in namespace and cgroup support.
[Misc] Update lsquic to v4.0.11 .
[Misc] Update libmodsecurity to v3.0.13 .

Hello everyone,

1. I noticed there is an update available for OLS. I tried updating with the following command: docker exec openlitespeed /usr/local/lsws/admin/misc/lsup.sh -v 1.8.2 and it didn't go as planned (pain, reboot, change to nginx, change back to ols). Is there a way to securely update OLS to the latest version permanently, or do we need to wait for Enhance to release it first?

2. Anyone else having this problem using OLS with the LSCache plugin? (I disabled the Bot fight mode in CF, i have Quicloud ips in hetzner allowed for port 80). Any help/suggestion is really appreciated..

There was a problem with retrieving your Domain Key. Please click the Waiting for Approval button to retry.

There are two reasons why we might not be able to communicate with your domain:

1) The POST callback to https://mysite.com/wp-json/litespeed/v1/token failed.

2) Our Current Online Server IPs was not allowlisted.

Please verify that your other plugins are not blocking REST API calls, allowlist our server IPs, or contact your server admin for assistance.

P.S. As I'm here, I'm new to Enhance (using Docker, etc.) and not in the hosting business. I'm a self-taught "web designer," and I mainly run some WordPress sites for my friends. I was using CloudPanel with Nginx. Since I have an LMS platform on WordPress, OLS has proven to be really amazing, and the presentation of Enhance sounds future-proof—something where I want to be. Thank you for having me in the Enhance family, and I really hope that I can learn a lot from you.

Regards,
Victor

slimx

victoryel 2. Anyone else having this problem using OLS with the LSCache plugin? (I disabled the Bot fight mode in CF, i have Quicloud ips in hetzner allowed for port 80). Any help/suggestion is really appreciated..

You have to disable the cloudflare proxy + make sure that you enter your actual server IP into the LS CACHE plugin. Once you get the domain key you can re-enable proxy.

xyzulu

victoryel 2. Anyone else having this problem using OLS with the LSCache plugin?

See: https://community.enhance.com/d/1639-issues-with-latest-lscache-plugin

xyzulu

victoryel Is there a way to securely update OLS to the latest version permanently, or do we need to wait for Enhance to release it first?

See: https://community.enhance.com/d/1911-ols-updates/2
(you need to run that on the same server you are updating.. hence the 127.0.0.1)

victoryel

slimx Thank you! That worked (disabled CF proxy and just to be sure i disabled bot fight mode and the security level to essentially off, before to ask for the Domain Key). 🙂

victoryel

xyzulu Thank you!!

DracoBlue

xyzulu
If you have the latest version of appcd you don't need to specify the IP, you can just run:

appcd-cli change-webserver open-lite-speed

Docker has not yet published the OLS 1.8.2 image.

xyzulu

DracoBlue Docker has not yet published the OLS 1.8.2 image

Just a technicality.. but Openlitespeed have not yet published their OLS 1.8.2 docker image.. Docker don't control any of this.

nqnoc

Instructions on how to update server components should included on the Docs

xyzulu

nqnoc Instructions on how to update server components should included on the Docs

A one click option to update from your Dashboard has been planned for a future update of Enhance.

DracoBlue

The OLS version 1.8.2 is now available on Docker.

slimx

Ahh cool 🙂

root@server:~# docker exec openlitespeed /usr/local/lsws/bin/openlitespeed -v LiteSpeed/1.8.1 Open (BUILD built: Thu Mar 28 15:46:53 UTC 2024) module versions: lsquic 4.0.8 modgzip 1.1 cache 1.65 mod_security 1.4 (with libmodsecurity v3.0.12) root@server:~# appcd-cli change-webserver open-lite-speed RUST_LOG=warn root@server:~# docker exec openlitespeed /usr/local/lsws/bin/openlitespeed -v LiteSpeed/1.8.2 Open (BUILD built: Wed Sep 25 18:44:05 UTC 2024) module versions: lsquic 4.0.8 modgzip 1.1 cache 1.66 mod_security 1.4 (with libmodsecurity v3.0.12)

victoryel

slimx Thank you. Btw. They seem to have some problems with modsec and 1.8.2 so i'm using 1.8.1 until they will solve it. I'm using modsec with comodo for my WordPress, Owasp is not working for me.

https://forum.openlitespeed.org/threads/ols-1-8-2-upgrade-std-length_error-breaks-mod_security.6194/