HardenedPHP repository issue on CloudLinux / CentOS

Issue

Repository failure due to the imunify360-ea-php-hardened repository to be enabled on the CloudLinux OS or it just fails with the HTTPS Error 401 - Unauthorized on CentOS.

There is a list of different scenarios:

1. Issue with repomd.xml 

failure: repodata/repomd.xml from imunify360-ea-php-hardened: [Errno 256] No more mirrors to try. https://repo.alt.cloudlinux.com/

2. 401 Status Code 

[Errno 14] HTTPS Error 401 - Unauthorized

3. Updates stopped working on CentOS 8 after installing Imunify360.

OS packages update fails with the following error:

cannot install the best update candidate for package ea-apr-util-1.6.1-8.8.16.cpanel.x86_64
- nothing provides ea-openssl11 >= 1:1.1.1d-1 needed by ea-apr-util-1:1.6.1-7.el8.cloudlinux.x86_64
(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

Environment

• HardenedPHP
• CloudLinux OS
• CentOS
• Imunify360

Solution

1. CloudLinux

1.1 Run the following command:

yum-config-manager --disable imunify360-ea-php-hardened

Hardened PHP is managed through LVE on CloudLinux OS.

1.2 If after the step above an HTTPS Error 401 - Unauthorized error happens when accessing the CloudLinux OS repository, check the CloudLinux License:

/usr/bin/cldetect --check-license

2. CentOS

2.1 Commonly the error is related to the HTTPS Error 401 - Unauthorized 401 status code when accessing the HardenedPHP repository, so check the Imunify360 license with the following commands:

imunify360-agent rstatus -v --json

{
  "warnings": [
    "License is invalid for current server"
  ]
}

Once a valid license is hooked up to the server, try again.

2.2 In case, it's CentOS 8 and when running yum upgrade it fails with the cannot install the best update candidate for package and nothing provides ea-openssl11 >= 1:1.1.1d-1 needed by ea-apr-util-1:1.6.1-7.el8.cloudlinux.x86_64.

• Make sure that HardenedPHP is not used:

# imunify360-agent features status hardened-php
{'message': 'Hardened-PHP is not installed', 'status': 'not_installed'}

• Disable the repository:

# yum-config-manager --disable imunify360-ea-php-hardened

• Rerun the update:

# yum upgrade

In case HardenedPHP is installed in the future, the repository will be enabled automatically. No further actions are required.