Informix

Informix

Connect with Db2, Informix, Netezza, open source, and other data experts to gain value from your data, share insights, and solve problems.

 View Only
Back to discussions
Expand all | Collapse all

V15 installer could not determine supported encryption library

  • 1.  V15 installer could not determine supported encryption library

    Posted Tue December 10, 2024 06:19 AM

    Hello,

    I am installing IBM Informix 15.0.0.0 Developer Edition on my Linux Debian 12.

    I have selected OpenSSL as encryption library, and I have:

    informix@toro:/opt3/dbs/ifx/IDS-15.0.0.0$ openssl version
OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024)

    And I got this error at the end of the installation:

    ....
                          Status: FATAL ERROR
                          Additional Notes: FATAL ERROR - Couldn't determine supported encryption library
                                            ERROR - Couldn't determine supported encryption library
                          Status: FATAL ERROR
                          Additional Notes: FATAL ERROR - INTERNAL ERROR: install:  isisofile is null

    I assume it's related to OpenSSL?

    I do not plan to use TLS/SSL connections on my dev machine so is this a blocker?

    Seb



    ------------------------------
    Sebastien FLAESCH
    ------------------------------


  • 2.  RE: V15 installer could not determine supported encryption library

    Posted Tue December 10, 2024 06:29 AM

    Something strange:

    First time I ran the V15 installer, I could choose between 2 encryption libraries: GSKit or OpenSSL.

    I have selected OpenSSL during this first installation.

    Now I try to re-install from scratch, but I don't see the option to choose between GSKit or OpenSSL

    I did a "private" installation.

    Did I miss something?

    I guess the installer writes my choices somewhere? Is there any way to cleanup my previous choices?

    I see quite some temp tiles in /tmp:

    drwxr-xr-x 3 informix   informix     4096 Dec 10 12:15 install.dir.728976
-rw-rw-r-- 1 informix   informix        0 Dec 10 12:15 2d5757f7193b04849ef.notes
drwxrwxr-x 2 informix   informix     4096 Dec 10 12:15 ismp001
drwxrwxr-x 3 informix   informix     4096 Dec 10 12:16 766705.tmp
-rw-rw-r-- 1 informix   informix     3517 Dec 10 12:16 2d5757f7193b04849ef.details
drwxr-xr-x 3 informix   informix     4096 Dec 10 12:16 install.dir.729809
-rw-rw-r-- 1 informix   informix        0 Dec 10 12:16 8a5c9440193b04906e0.notes
drwxrwxr-x 2 informix   informix     4096 Dec 10 12:16 ismp002
drwxrwxr-x 3 informix   informix     4096 Dec 10 12:17 089653.tmp
-rw-rw-r-- 1 informix   informix     3517 Dec 10 12:17 8a5c9440193b04906e0.details
-rw-rw---- 1 informix   informix    21736 Dec 10 12:22 iad_act.log
-rw-rw-r-- 1 informix   informix    41289 Dec 10 12:22 bundle_install.stdout
-rw-rw-r-- 1 informix   informix    66192 Dec 10 12:22 bundle_install.stderr
drwxr-xr-x 2 informix   informix     4096 Dec 10 12:22 hsperfdata_informix

    Seb



    ------------------------------
    Sebastien FLAESCH
    ------------------------------

    Original Message


  • 3.  RE: V15 installer could not determine supported encryption library

    Posted Wed December 11, 2024 12:07 PM

    I tried the same, on (Windows/WSL based) Debian 12, with same OpenSSL version, yet as a standard root-install:

    • it didn't ask which encryption lib to use  -  because of the root-install??
    • it successfully installed IBM GSKit
    • it failed with same error
    • in $INFORMIXDIR/lib/, the only libisi* item I got is libisi_gsk.so.3.0
    • so no libisi_o*.3.0 which would be the OpenSSL variants (for OpenSSL versions)
    • and no libisi.so.3 (sym link I'd assume) which probably is what "isisofile is null" is referring to

    libisi (Informix Security Interface) is a wrapper layer around either GSKit or OpenSSL, for providing a unified internal interface to all those security and cryptographic calls.
    It (libisi.so.3) would be a link to (or a copy of) one of the sub-system specific libisi_* objects, thus determining which system's gonna be used - basically the decision you made there for OpenSSL.

    The error we're both seeing, you for OpenSSL and I for the (default?) GSKit, simply indicates the installer wasn't able to determine which shared object to create this link for...

    libisi.so.3 now missing, as you correctly suspected, will disallow any security and encryption related functionality - and not be a problem as long as you'd not go there.
    Only, it's not only TLS/SSL, or maybe column level encryption or Ear;  what this also would disable is any edition other than the (default) Developer Edition.

    The good news: you can very easily cure this problem by manually creating that sym link

    Nonetheless, we'd like to understand this failure -> investigating...

    And no, I'd not know that/where it remembers that GSKit/OpenSSL decision for a later ids_install.

    BR,
     Andreas



    ------------------------------
    Andreas Legner
    Dev Engineer
    HCL Software
    ------------------------------

    Original Message


  • 4.  RE: V15 installer could not determine supported encryption library

    Posted Wed December 11, 2024 12:55 PM

    Hello Andreas,

    Thanks for your detailed answer!

    Here is what I see in the $INFORMIXDIR/lib dir (no symblink):

    informix@toro:/opt3/dbs/ifx/IDS-15.0.0.0/lib$ ls -l libisi*
-rwxr-xr-x 1 informix informix 142104 Dec 10 12:22 libisi_gsk.so.3.0

    From a developer perspective, I do not need encryption features.

    I could start the server and run our QA tests without problems after doing some adjustments for the BIGINT negative rowids, and the new syscolumns.collength size for TEXT/BYTE columns.

    I did also run 50 times all our tests with the same fglrun process under valgrind --tool=massif and saw no memory leak (flat graph below):

    BR,

    Seb



    ------------------------------
    Sebastien FLAESCH
    ------------------------------

    Original Message


  • 5.  RE: V15 installer could not determine supported encryption library

    Posted Wed December 11, 2024 12:56 PM

    Actually, a "private install" also doesn't ask this GSKit/OpenSSL choice  -  are you possibly confusing this with CSDK installation?

    Also: is this possibly part of the problem:

    $ ldd /usr/bin/gsk8capicmd_64
            linux-vdso.so.1 (0x00007ffccebde000)
          libgsk8km_64.so => not found <<<<<<<<<
          libgsk8cms_64.so => not found <<<<<<<<<
            libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f94da141000)
            libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f94da13c000)
            libstdc++.so.6 => /lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f94d9f22000)
            libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f94d9e41000)
            libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f94d9e21000)
            libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f94d9c40000)
            /lib64/ld-linux-x86-64.so.2 (0x00007f94da14e000)

    Not sure right now what's causing this (I've uninstalled my GSKit and had a new run of ids_install re-install it).



    ------------------------------
    Andreas Legner
    Dev Engineer
    HCL Software
    ------------------------------

    Original Message


  • 6.  RE: V15 installer could not determine supported encryption library

    Posted Thu December 12, 2024 03:02 AM

    Hello Andreas,

    I have installed both Informix 15 server and CSDK 15 (in separate dirs)

    So yes may I have seen the GSKit/OpenSSL choice in the CSDK installation.

    For sure I have never selected the "Multiuser Installation", and used "informix" user to run ids_install.

    About:

    $ ldd /usr/bin/gsk8capicmd_64
            linux-vdso.so.1 (0x00007ffccebde000)
          libgsk8km_64.so => not found <<<<<<<<<
        libgsk8cms_64.so => not found <<<<<<<<<

    I am not an expert of GSKit, but this looks more like a GSKit installation / config problem into the Linux system.

    On my Linux Debian 12, I see the same issue with the ldd check:

    root@toro:~# ldd /usr/bin/gsk8capicmd_64
        linux-vdso.so.1 (0x00007ffd27ffa000)
        libgsk8km_64.so => not found
      libgsk8cms_64.so => not found
    ...

    root@toro:~# dpkg-query --search libgsk8km_64.so
    gskssl64: /usr/local/ibm/gsk8_64/lib64/libgsk8km_64.so

    root@toro:~# dpkg-query --search libgsk8cms_64.so
    gskssl64: /usr/local/ibm/gsk8_64/lib64/libgsk8cms_64.so

    Seb



    ------------------------------
    Sebastien FLAESCH
    ------------------------------

    Original Message


  • 7.  RE: V15 installer could not determine supported encryption library

    Posted Thu December 12, 2024 03:29 AM

    Hi

    the workaround is to install the Informix Server - install GSKIT out of $INFORMIXDIR/gskit and then install the Informix Server again.

    Then normally the GSKIT setup for the server is fine. 



    ------------------------------
    Hedwig Fuchs
    ------------------------------

    Original Message


  • 8.  RE: V15 installer could not determine supported encryption library

    Posted Wed December 11, 2024 01:46 PM

    Looks like LD_LIBRARY_PATH=/usr/lib64 solves the problem for the GSKit utilities (gsk8capicmd, ...) -  and might be able to solve this installer problem if only it made it from the command line all the way through ids_install -> a java process  to a utility testing the libisi_gsk.so library.

    How can this be set system wide?



    ------------------------------
    Andreas Legner
    Dev Engineer
    HCL Software
    ------------------------------

    Original Message


  • 9.  RE: V15 installer could not determine supported encryption library

    Posted Wed December 11, 2024 02:16 PM

    So this finally seems to be doing the trick:

    as root:

    • echo /usr/lib64 > /etc/ld.so.conf.d/gskit.conf
    • ldconfig -v


    ------------------------------
    Andreas Legner
    Dev Engineer
    HCL Software
    ------------------------------

    Original Message


  • 10.  RE: V15 installer could not determine supported encryption library

    Posted Sat April 05, 2025 06:05 AM

    Hello Andreas - I have the same problem with gskit install with 14.10.FC11W1 on AIX 7.2 - see my previous post from yesterday. Tried with older engine stopped. Script installgskit run witnout reporting any error but gskit is not installed (even when I renames current gskit_64 dir in /usr/opt/ibm.

    Could help running installp on *.rte files which are in gskit directory after unpacking the archive with them.



    ------------------------------
    Milan
    ------------------------------

    Original Message


Related Content