On Tue, Apr 15, 2014 at 05:04:13PM +0300, andreil1 wrote:

Hi,

I have an old OpenSuSE 12.1 which is quite difficult to upgrade due to very complex setup.

In order to upgrade to the latest OpenSSL without Heartbleed bug, I had used this repository: http://download.opensuse.org/repositories/home:/aljex/openSUSE_12.1/

However, after upgrade BIND stopped working, with message:

Apr 15 15:19:31 SRV named[2463]: error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(/usr/lib/engines/libgost.so): /usr/lib/engines/libgost.so: cannot open shared object file: No such file or directory Apr 15 15:19:31 SRV named[2463]: error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244: Apr 15 15:19:31 SRV named[2463]: error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450: Apr 15 15:19:31 SRV named[2463]: error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:418:id=gost Apr 15 15:19:31 SRV named[2463]: initializing DST: crypto failure Apr 15 15:19:31 SRV named[2463]: exiting (due to fatal error) Apr 15 15:19:31 SRV named[1722]: Starting name server BIND ..failed

Looks like CryptoDev module can't be loaded anymore. Additionally, there seem to be a problem with Apache / PHP.

Anyone have any idea about upgrade path? Apart from OpenSSL / ssh packages, what else need to be upgraded / installed ?

Thanks in advance for any suggestion(s).

openSUSE used openssl 1.0.0e, so a heartbleed fix is NOT required on 12.1. Ciao, Marcus -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org

Am 15.04.14 16:04, schrieb andreil1:

Hi,

I have an old OpenSuSE 12.1 which is quite difficult to upgrade due to very complex setup.

In order to upgrade to the latest OpenSSL without Heartbleed bug, I had used this repository: http://download.opensuse.org/repositories/home:/aljex/openSUSE_12.1/

However, after upgrade BIND stopped working, with message:

Apr 15 15:19:31 SRV named[2463]: error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library:dso_dlfcn.c:187:filename(/usr/lib/engines/libgost.so): /usr/lib/engines/libgost.so: cannot open shared object file: No such file or directory Apr 15 15:19:31 SRV named[2463]: error:25070067:DSO support routines:DSO_load:could not load the shared library:dso_lib.c:244: Apr 15 15:19:31 SRV named[2463]: error:260B6084:engine routines:DYNAMIC_LOAD:dso not found:eng_dyn.c:450: Apr 15 15:19:31 SRV named[2463]: error:2606A074:engine routines:ENGINE_by_id:no such engine:eng_list.c:418:id=gost Apr 15 15:19:31 SRV named[2463]: initializing DST: crypto failure Apr 15 15:19:31 SRV named[2463]: exiting (due to fatal error) Apr 15 15:19:31 SRV named[1722]: Starting name server BIND ..failed

Looks like CryptoDev module can't be loaded anymore. Additionally, there seem to be a problem with Apache / PHP.

Anyone have any idea about upgrade path? Apart from OpenSSL / ssh packages, what else need to be upgraded / installed ?

Thanks in advance for any suggestion(s).

Andrei

Andrei, you should revert to the original openssl version; otherwise you'll have to upgrade all related packages, too. -- Johannes Weberhofer Weberhofer GmbH, Austria, Vienna -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org