Re: openssl problem after patches install

From: Ivan Rayner (ivanr_at_sgi.com)
Date: 11/30/03 

Date: Sun, 30 Nov 2003 11:07:19 +0000 (UTC)

Rick <rick@diabolo.rootshell.be> wrote:
> after I installed all the security patches this happened to me:

What patch did you install, specifically?

You should have:

Distribution: patchSG0005362
I = Installed, R = Removed

   Name Date Description

   patchSG0005362 OpenSSH and OpenSSL security patch for IRIX 6.5.19
   patchSG0005362.openssh_man OpenSSH Online Documentation, 3.6.1p2
   patchSG0005362.openssh_man.manpages OpenSSH man pages, 3.6.1p2
   patchSG0005362.openssh_man.relnotes OpenSSH Release Notes, 3.6.1p2
   patchSG0005362.openssh_sw OpenSSH execution only env, 3.6.1p2
   patchSG0005362.openssh_sw.client OpenSSH Client Software, 3.6.1p2
   patchSG0005362.openssh_sw.common OpenSSH Common Client/Server Software, 3.6.1p2
   patchSG0005362.openssh_sw.server OpenSSH Server Software, 3.6.1p2
   patchSG0005362.openssl_man openssl Online Documentation, 0.9.7b
   patchSG0005362.openssl_man.manpages openssl man pages, 0.9.7b
   patchSG0005362.openssl_man.manpages_dev openssl library function man pages, 0.9.7b
   patchSG0005362.openssl_man.relnotes openssl Release Notes, 0.9.7b
   patchSG0005362.openssl_sw openssl execution only env, 0.9.7b
   patchSG0005362.openssl_sw.base openssl executables, 0.9.7b
   patchSG0005362.openssl_sw.headers openssl header files, 0.9.7b
   patchSG0005362.openssl_sw.lib32 openssl n32 libraries, 0.9.7b

You can get this by going through supportfolio. The openssl patch that is
available from

  ftp://patches.sgi.com/support/free/security/patches/6.5.19/

dated August, shouldn't be there unfortunately. I'll try to remember
to ask someone about it on Monday.

> openssl
> 4867:openssl: rld: Fatal Error: Cannot Successfully map soname
> 'libssl.so.0.9.7' under any of the filenames
> /usr/lib32/libssl.so.0.9.7:/usr/lib32/internal/libssl.so.0.9.7:
> /lib32/libssl.so.0.9.7:/opt/lib32/libssl.so.0.9.7:

libssl.so.0.9.7 should be in /usr/lib32 and come in patch 5362 (for
6.5.19) in the patchSG0005362.openssl_sw.lib32 subsystem.

> this is the installed software:
>
> I fw_openssl 11/25/2003 openssl-0.9.6j Secure Sockets Layer Toolkit
> I fw_openssl.sw 11/25/2003 openssl-0.9.6j execution only env
> I fw_openssl.sw.lib 11/25/2003 openssl-0.9.6j shared libraries
> I fw_openssl.sw.openssl 11/25/2003 openssl-0.9.6j execution only env
> I openssl 11/16/2003 openssl libraries, 0.9.7b
> I openssl.man 11/16/2003 openssl Online Documentation, 0.9.7b
> I openssl.man.manpages 11/16/2003 openssl man pages, 0.9.7b
> I openssl.man.relnotes 11/16/2003 openssl Release Notes, 0.9.7b
> I openssl.sw 11/16/2003 openssl execution only env, 0.9.7b
> I openssl.sw.base 11/16/2003 openssl executables, 0.9.7b
> I openssl 11/13/2003 openssl libraries, 0.9.6g
> I openssl.sw 11/13/2003 openssl execution only env, 0.9.6g
> I openssl.sw.lib32 11/13/2003 openssl n32 libraries, 0.9.6g
>
> after I installed patches looks like my openssl is messed...
> How I can fix the problem?

Well, if you want to use openssl from IRIX, I'd uninstall fw_openssl,
it's only complicating the issue.

You should start with the openssl product from 6.5.19:

   Name Version Description

   openssl 1278702120 openssl libraries, 0.9.6g
   openssl.man 1278702120 openssl Online Documentation, 0.9.6g
   openssl.man.relnotes 1278702120 openssl Release Notes, 0.9.6g
   openssl.sw 1278702120 openssl execution only env, 0.9.6g
   openssl.sw.lib32 1278702120 openssl n32 libraries, 0.9.6g

and then install patch5362 as above.

Ivan 

-- 
Ivan Rayner
ivanr@sgi.com

Relevant Pages

  • SUMMARY: incomplete openssl build
    ... Thanks for all the responses. ... Supposedly, after gcc 2.95.x, shared libraries are ... I used the build for openssl ... I'm using a pdf guide I downloaded from the web to install openssh on my ...
    (SunManagers)
  • Re: Server Running Fedora Core 2 Lots of login attempts
    ... Why are you accepting login attempts from the world? ... >To install OpenSSL, you will need: ... openssl096b 0.9.6b The OpenSSL toolkit. ... create it with the command ...
    (comp.os.linux.security)
  • Re: Should I have 2 copies of OpenSSL?
    ... you have the most recent version of openssl ... installed in base due to the upgrade to 6.0 - release. ... install of OpenSSL and not to install OpenSSL as a dependency from ports. ...
    (freebsd-questions)
  • broken openssl on freebsd60
    ... I've been trying to install a new server using the openssl port and keep ... postgresql81 or postgresql80+postgis ... bobby# make install ...
    (freebsd-questions)
  • (no subject)
    ... With solaris 8, openssl 9.6.g. ... I tried prngd with no success. ... had to install a patch for random number generation and then reboot. ...
    (comp.security.ssh)