[linux] problem so SSL kniznicou na Debian testing, blbne IMAPS, courier-imap - rychle riesenie problemu

Lubomir Host rajo na platon.sk
Úterý Říjen 25 14:34:14 CEST 2005


Zdravim,

prave som pri aktualizacii mojho debian/testing servera narazil na taky
problem, ze sa klienti nevedeli pripojit cez IMAPS. Problem bol zasity
niekde v libssl kniznici.

Prejavuje sa to nasledovne:

----------------------------------------------------------------------------------%<----------------------------------------------------------------------------------
2005-10-25T14:29:36+0100 server [info] imapd-ssl: couriertls: /etc/courier/imapd.pem: error:25066067:DSO support routines:DLFCN_LOAD:could not load the shared library
----------------------------------------------------------------------------------%<----------------------------------------------------------------------------------

Na korektnom rieseni problemu budem musiet zapracovat, ale tuto je
postup, ako to rychlo fixnut:

---------------------------------------------------------------------------%<---------------------------------------------------------------------------
14:32 root na server [/usr/lib]## ldd /usr/bin/couriertls            
        linux-gate.so.1 =>  (0xffffe000)
        libcrypt.so.1 => /lib/tls/libcrypt.so.1 (0x40010000)
        libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0x4003e000)
        libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0x4007d000)
        libc.so.6 => /lib/tls/libc.so.6 (0x41019000)
        libdl.so.2 => /lib/tls/libdl.so.2 (0x4118f000)
        /lib/ld-linux.so.2 (0x41000000)
14:32 root na server [/usr/lib]## cd /usr/lib/i686/cmov/
14:32 root na server [/usr/lib/i686/cmov]## ls -la
total 2748
drwxr-xr-x  2 root root    4096 Oct 23 14:05 ./
drwxr-xr-x  3 root root    4096 Nov 25  2004 ../
-rw-r--r--  1 root root 1063264 Oct 12 21:31 libcrypto.so.0.9.7
-rw-r--r--  1 root root 1269560 Oct 18 19:38 libcrypto.so.0.9.8
-rw-r--r--  1 root root  198696 Oct 12 21:31 libssl.so.0.9.7
-rw-r--r--  1 root root  253856 Oct 18 19:38 libssl.so.0.9.8
14:32 root na server [/usr/lib/i686/cmov]## mv libcrypto.so.0.9.8 libcrypto.so.0.9.8.bad; ln -s libcrypto.so.0.9.7 libcrypto.so.0.9.8 
14:32 root na server [/usr/lib/i686/cmov]## ll
total 2748
drwxr-xr-x  2 root root    4096 Oct 25 14:32 ./
drwxr-xr-x  3 root root    4096 Nov 25  2004 ../
-rw-r--r--  1 root root 1063264 Oct 12 21:31 libcrypto.so.0.9.7
lrwxrwxrwx  1 root root      18 Oct 25 14:32 libcrypto.so.0.9.8 -> libcrypto.so.0.9.7
-rw-r--r--  1 root root 1269560 Oct 18 19:38 libcrypto.so.0.9.8.bad
-rw-r--r--  1 root root  198696 Oct 12 21:31 libssl.so.0.9.7
-rw-r--r--  1 root root  253856 Oct 18 19:38 libssl.so.0.9.8
14:32 root na server [/usr/lib/i686/cmov]## mv libssl.so.0.9.8 libssl.so.0.9.8.bad ; ln -s libssl.so.0.9.7 libssl.so.0.9.8 
14:33 root na server [/usr/lib/i686/cmov]## cd /usr/lib/i686/cmov/2005-10-25T14:33:19+0100 server [debug] imapd-ssl: Connection, ip=[::ffff:158.195.17.243]
ldd /usr/bin/couriertls
        linux-gate.so.1 =>  (0xffffe000)
        libcrypt.so.1 => /lib/tls/libcrypt.so.1 (0x40010000)
        libssl.so.0.9.8 => /usr/lib/i686/cmov/libssl.so.0.9.8 (0x4003e000)
        libcrypto.so.0.9.8 => /usr/lib/i686/cmov/libcrypto.so.0.9.8 (0x4006f000)
        libc.so.6 => /lib/tls/libc.so.6 (0x41019000)
        libdl.so.2 => /lib/tls/libdl.so.2 (0x4118f000)
        /lib/ld-linux.so.2 (0x41000000)
14:33 root na server [/usr/lib/i686/cmov]## ls -la
total 2748
drwxr-xr-x  2 root root    4096 Oct 25 14:33 ./
drwxr-xr-x  3 root root    4096 Nov 25  2004 ../
-rw-r--r--  1 root root 1063264 Oct 12 21:31 libcrypto.so.0.9.7
lrwxrwxrwx  1 root root      18 Oct 25 14:32 libcrypto.so.0.9.8 -> libcrypto.so.0.9.7
-rw-r--r--  1 root root 1269560 Oct 18 19:38 libcrypto.so.0.9.8.bad
-rw-r--r--  1 root root  198696 Oct 12 21:31 libssl.so.0.9.7
lrwxrwxrwx  1 root root      15 Oct 25 14:33 libssl.so.0.9.8 -> libssl.so.0.9.7
-rw-r--r--  1 root root  253856 Oct 18 19:38 libssl.so.0.9.8.bad
14:33 root na server [/usr/lib/i686/cmov]##
---------------------------------------------------------------------------%<---------------------------------------------------------------------------

Courier server NETREBA restartovat. Rozbehne sa to zrazu samo.

Zaujimalo by ma, ze preco su v systeme dve libssl kniznice:

-----------------------------------------%<-----------------------------------------
14:38 root na gimmel [/usr/lib/i686/cmov]## dpkg -l libssl\*
un  libssl       <none>    (no description available)
ii  libssl-dev   0.9.8a-2  SSL development libraries, header files and documentation
ii  libssl0.9.7  0.9.7g-5  SSL shared libraries
ii  libssl0.9.8  0.9.8a-2  SSL shared libraries
-----------------------------------------%<-----------------------------------------

Mal niekto podobny problem?

Diik, rajo

-- 
Lubomir Host 'rajo' <rajo AT platon.sk>   ICQ #:  257322664   ,''`.
Platon Software Development Group         http://platon.sk/  : :' :
Homepage: http://rajo.platon.sk/en/references                `. `'
http://www.gnu.org/philosophy/no-word-attachments.html         `-




Další informace o konferenci linux