Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

5. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

SANKET RATHI

Posted Wed October 26, 2022 12:25 AM

Hi Glenn, as openssl 1.1.1 is becoming more prevalent and users requested we have moved to openssl 1.1.1 recently. So now newer versions of packages are built against openssl 1.1.1 if someone is using older version of package then it will still work with openssl 1.0.2

Sent from my iPhone

Original Message

Original Message:
Sent: 10/25/2022 11:33:00 PM
From: Glenn Robinson
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson
------------------------------

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

6. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

Derek Cramer

Posted Thu October 27, 2022 06:50 AM

Is this announced on a mailing list somewhere? I always seem to end up trawling Google for solutions when DNF (or any RPM) breaks on AIX. It would be nice to get a pre-emptive heads-up.

------------------------------
Derek Cramer
------------------------------

Original Message

Original Message:
Sent: Wed October 26, 2022 12:25 AM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, as openssl 1.1.1 is becoming more prevalent and users requested we have moved to openssl 1.1.1 recently. So now newer versions of packages are built against openssl 1.1.1 if someone is using older version of package then it will still work with openssl 1.0.2

Sent from my iPhone

Original Message:
Sent: 10/25/2022 11:33:00 PM
From: Glenn Robinson
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

7. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

SANKET RATHI

Posted Sun October 30, 2022 01:00 PM

Yes it was announced.
https://community.ibm.com/community/user/power/discussion/moving-to-openssl

------------------------------
SANKET RATHI
------------------------------

Original Message

Original Message:
Sent: Thu October 27, 2022 05:39 AM
From: Derek Cramer
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this announced on a mailing list somewhere? I always seem to end up trawling Google for solutions when DNF (or any RPM) breaks on AIX. It would be nice to get a pre-emptive heads-up.

------------------------------
Derek Cramer

Original Message:
Sent: Wed October 26, 2022 12:25 AM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, as openssl 1.1.1 is becoming more prevalent and users requested we have moved to openssl 1.1.1 recently. So now newer versions of packages are built against openssl 1.1.1 if someone is using older version of package then it will still work with openssl 1.0.2

Sent from my iPhone

Original Message:
Sent: 10/25/2022 11:33:00 PM
From: Glenn Robinson
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

8. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

Karen Van Gogh

Posted Mon November 07, 2022 06:00 PM

I assume this is the same for the VIOS aix version we are on latest vios 3.1.3.21 and installing DNF and found this week that we received the error above:
I found nothing for any updates to openssl so possibly this applies to vios os openssl also?

------------------------------
Karen Van Gogh
Jack Henry and Associates
kvangogh@jackhenry.com
------------------------------

Original Message

Original Message:
Sent: Sun October 30, 2022 01:00 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Yes it was announced.
https://community.ibm.com/community/user/power/discussion/moving-to-openssl

------------------------------
SANKET RATHI

Original Message:
Sent: Thu October 27, 2022 05:39 AM
From: Derek Cramer
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this announced on a mailing list somewhere? I always seem to end up trawling Google for solutions when DNF (or any RPM) breaks on AIX. It would be nice to get a pre-emptive heads-up.

------------------------------
Derek Cramer

Original Message:
Sent: Wed October 26, 2022 12:25 AM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, as openssl 1.1.1 is becoming more prevalent and users requested we have moved to openssl 1.1.1 recently. So now newer versions of packages are built against openssl 1.1.1 if someone is using older version of package then it will still work with openssl 1.0.2

Sent from my iPhone

Original Message:
Sent: 10/25/2022 11:33:00 PM
From: Glenn Robinson
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

9. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

IBM Champion

Mario Stargard

Posted Fri November 18, 2022 10:02 AM

Hi Glenn, see my post on this topic.

https://community.ibm.com/community/user/power/discussion/unresolved-dependencies-and-toolbox-goals

------------------------------
Mario Stargard
------------------------------

Original Message

Original Message:
Sent: Tue October 25, 2022 11:32 PM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

10. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

Glenn Robinson

Posted Fri November 18, 2022 10:15 AM

Mario,

That's very useful and feels very familiar in respect to some of the comments to make.

I'm definitely waiting for the next AIX update before rather than downloading and installing OpenSSL and OpenSSH from MRS. I don't want to be on a situation where I have to get AIX support from two different parts of IBM.

Original Message

Original Message:
Sent: 11/18/2022 10:02:00 AM
From: Mario Stargard
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, see my post on this topic.

https://community.ibm.com/community/user/power/discussion/unresolved-dependencies-and-toolbox-goals

------------------------------
Mario Stargard
------------------------------

Original Message:
Sent: Tue October 25, 2022 11:32 PM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

11. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

SANKET RATHI

Posted Thu December 01, 2022 05:03 AM
Edited by SANKET RATHI Thu December 01, 2022 05:03 AM

As far as I know openssl on MRS is supported through same AIX support process.

------------------------------
SANKET RATHI
------------------------------

Original Message

Original Message:
Sent: Fri November 18, 2022 10:15 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Mario,

That's very useful and feels very familiar in respect to some of the comments to make.

I'm definitely waiting for the next AIX update before rather than downloading and installing OpenSSL and OpenSSH from MRS. I don't want to be on a situation where I have to get AIX support from two different parts of IBM.

Original Message:
Sent: 11/18/2022 10:02:00 AM
From: Mario Stargard
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, see my post on this topic.

https://community.ibm.com/community/user/power/discussion/unresolved-dependencies-and-toolbox-goals

------------------------------
Mario Stargard

Original Message:
Sent: Tue October 25, 2022 11:32 PM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

12. RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Like

Jan Harris

Posted Thu December 01, 2022 06:56 PM

That is correct, Sanket. @Glenn Robinson, you can open a case for AIX support if needed.
Here is a technote that explains the download:
See Downloading and Installing or Upgrading OpenSSL and OpenSSH
https://www.ibm.com/support/pages/node/720655

------------------------------
Jan Harris
AIX Development Support (Liaison to the AIX Toolbox for Open Source)
IBM (Contract)
Austin TX
------------------------------

Original Message

Original Message:
Sent: Thu December 01, 2022 05:03 AM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

As far as I know openssl on MRS is supported through same AIX support process.

------------------------------
SANKET RATHI

Original Message:
Sent: Fri November 18, 2022 10:15 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Mario,

That's very useful and feels very familiar in respect to some of the comments to make.

I'm definitely waiting for the next AIX update before rather than downloading and installing OpenSSL and OpenSSH from MRS. I don't want to be on a situation where I have to get AIX support from two different parts of IBM.

Original Message:
Sent: 11/18/2022 10:02:00 AM
From: Mario Stargard
Subject: RE: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn, see my post on this topic.

https://community.ibm.com/community/user/power/discussion/unresolved-dependencies-and-toolbox-goals

------------------------------
Mario Stargard

Original Message:
Sent: Tue October 25, 2022 11:32 PM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Is this something that has changed recently?

I have other customers using dnf too so how can I establish if/when they will require OpenSSL 1.1 and what the impact of that is?

------------------------------
Glenn Robinson

Original Message:
Sent: Tue October 25, 2022 02:24 PM
From: SANKET RATHI
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Thank you Andrey.
Hi @Glenn Robinson as Andrey said we are using openssl 1.1.1 to build AIX toolbox packages so please update openssl 1.1.1 or later to your system.
https://www.ibm.com/resources/mrs/assets?source=aixbp

------------------------------
SANKET RATHI

Original Message:
Sent: Mon October 24, 2022 03:11 AM
From: Andrey Klyachkin
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

Hi Glenn,

I've got the same last week. Looks like IBM uses OpenSSL 1.1.1 now for RPM packages. You have to download OpenSSL 1.1.1 from IBM Web Pack (https://www.ibm.com/resources/mrs/assets?source=aixbp), then run updtvpkg und try to install the RPM packages. Please note, that if you update OpenSSL you may need to update OpenSSH too.

Andrey

------------------------------
Andrey Klyachkin

https://www.power-devops.com

Original Message:
Sent: Sat October 22, 2022 05:00 AM
From: Glenn Robinson
Subject: Issue with DNF updte - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc

AIX 7200-05-03.

When I run a dnf update command I get:

Last metadata expiration check: 0:35:08 ago on Sat 22 Oct 09:11:30 2022.Error: Problem 1: cannot install the best update candidate for package krb5-libs-1.18.5-1.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by krb5-libs-1.18.5-2.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by krb5-libs-1.18.5-2.ppc Problem 2: cannot install the best update candidate for package openldap-2.4.58-3.ppc  - nothing provides libcrypto.a(libcrypto.so.1.1) needed by openldap-2.4.58-4.ppc  - nothing provides libssl.a(libssl.so.1.1) needed by openldap-2.4.58-4.ppc(try to add '--skip-broken' to skip uninstallable packages or '--nobest' to use not only best candidate packages)

IF use --nobest the updates are donwloaded and installed, but this is not ideal I guess?

I have run dnf clean all and updtvpkg but these don't fix the issue.

My repos are:

repo id                                                           repo nameAIX_Toolbox                                                       AIX generic repositoryAIX_Toolbox_72                                                    AIX 7.2 specific repositoryAIX_Toolbox_noarch                                                AIX noarch repository

Any suggestion how I fix this?

------------------------------
Glenn Robinson
------------------------------

IBM Power

Connect, learn, share, and engage with IBM Power.

AIX Open Source