UNIX for Advanced & Expert Users

Hi,


All of our production servers are installed with Apache and OpenSSL from source and not yum.
My boss has assigned me with a task of upgrading all production servers Apache httpd & openssl to the latest patch from Centos Repo.


Is it possible to do this via yum? Please suggest the best ways to perform this.


Thx.

Patching might not work - because the patch may assume versions of the link libraries that are different from what you linked in your original build.
Do you have a sandbox to test the patch? Try it there first. We have a couple of virtual boxes that we can play with for testing. We refresh them using the current production version. -- after we trash them.

I seriously doubt it. Installing from source and installing using a package manager (like YUM) are two different kettles of fish.

You are better off building the server from scratch in a test bed with your HTML files and testing first as Jim suggested.

Or you can also do as Jim suggested try upgrading using YUM on a TEST server (NOT production).

How many web servers are you talking about? 3? 10? 100?

We have about 200 - 300 production web servers.

And how mission critical are these production servers?

What is the risk management profile of each one of them?

If they have a "high risk" profile if not available, the approach is different.

For example are all 300 web servers running the same application(s) and they are in a huge network of redundant web servers?

Or all all 300 web server running different applications, each with a different risk management profile?

Of all the 300 production web servers, most of them run different apps, and they are all divided into different segments, like 90, 130, 140, 80, 60.
Some (Very few) are used for load balancing.

Well, they all cannot have the same mission criticality and risk management profile.

Did you avoid answering these very important question for a particular reason?