Power

 View Only

  • 1.  Installing any RPM from YUM that requires libcrypto and libssl results in an error

    Posted Tue January 07, 2025 07:45 AM

    Hello, Happy new year! Am looking if someone knows what should I be doing and might be missing here? Advance thanks to all!

    The situation:

     

    • LPAR with OS version 7200-04-01-1939
      - LPAR with OpenSSL version:


    root@[STAGING]:/> lslpp -l | grep openssl
      openssl.base            1.0.2.1801  COMMITTED  Open Secure Socket Layer
      openssl.license         1.0.2.1801  COMMITTED  Open Secure Socket License
      openssl.man.en_US       1.0.2.1801  COMMITTED  Open Secure Socket Layer
      openssl.base            1.0.2.1801  COMMITTED  Open Secure Socket Layer
    - LPAR has YUM installed via yum_bundle_v6.tar (2020-12-04 09:02)
    - Remote DNF repository server sync'ed to https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/" href="https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/" rel="noreferrer noopener" target="_blank" class="fui-Link ___1q1shib f2hkw1w f3rmtva f1ewtqcl fyind8e f1k6fduh f1w7gpdv fk6fouc fjoy568 figsok6 f1s184ao f1mk8lai fnbmjn9 f1o700av f13mvf36 f1cmlufx f9n3di6 f1ids18y f1tx3yz7 f1deo86v f1eh06m1 f1iescvh fhgqx19 f1olyrje f1p93eir f1nev41a f1h8hb77 f1lqvz6u f10aw75t fsle3fq f17ae5zn" title="https://public.dhe.ibm.com/aix/freesoftware/aixtoolbox/ezinstall/ppc/">https://public.dhe.ibm.com/aix/freeSoftware/aixtoolbox/ezinstall/ppc/ as of October 2024

     

     

    The problem:

     

    Installing any RPM from YUM that requires libcrypto and libssl results in an error like below:

     

    root@[STAGING]:/> yum update   
    (output truncated for brevity)
    --> Finished Dependency Resolution
    Error: Package: sudo-1.9.15p5-1.ppc (AIX_Toolbox)
               Requires: libcrypto.a(libcrypto.so.1.1)
    Error: Package: sudo-1.9.15p5-1.ppc (AIX_Toolbox)
               Requires: libssl.a(libssl.so.1.1)
    Error: Package: openldap-2.5.16-1.ppc (AIX_Toolbox)
               Requires: libcrypto.a(libcrypto.so.1.1)
    (output truncated for brevity)

     

     

    Similarly, installing SUDO and OPENLDAP via this command results in the same error:

     

    root@[STAGING]:/> yum install openldap sudo

     

     

    However, specifying the version to a known version that does not require OpenSSL 1.1 works:

     

    root@[STAGING]:/> yum install sudo-1.8.15-2 openldap-2.4.40-1

     How can we force YUM to use only the RPM versions that do not require OpenSSL 1.1? OpenSSL and OpenSSH cannot be updated at this point.

    Best Regards,

    Fred



    ------------------------------
    Ziegfred Borja
    ------------------------------


  • 2.  RE: Installing any RPM from YUM that requires libcrypto and libssl results in an error

    Posted Tue January 07, 2025 09:46 AM
    Hi
    Update your openssh and openssl to the latest release.

    Regards 



    Original Message


  • 3.  RE: Installing any RPM from YUM that requires libcrypto and libssl results in an error

    Posted Tue January 07, 2025 07:31 PM

    Hello Paul, 

    Thank you for your reply,  we are trying to mimic the configuration of our PRODUCTION because we will also be simulating upgrade of our Applications and Database using the old and same software versions.  The reason we wanted to maintain the OS version and TL level as well as the openssl/openssh version.  



    ------------------------------
    Ziegfred Borja
    ------------------------------

    Original Message


  • 4.  RE: Installing any RPM from YUM that requires libcrypto and libssl results in an error

    Posted Tue January 07, 2025 09:54 PM
    Hi
    The latest yum, rpms require the latest openssh/openssl. 
    You will either have to update the rpms manually with the older openssh openssl or upgrade the to the latest. I went through the same issue and it was easier to update.

    Regards 



    Original Message