eric only openssl openssl-devel shows up for updates
i carried out updates on my test server and there were no issues will try on my production during the weekend and revert. thanks rajesh ----- Original Message ----- From: Eric Broch [mailto:ebr...@whitehorsetc.com] To: qmailtoaster-list@qmailtoaster.com Sent: Wed, 6 Sep 2017 10:10:45 -0600 Subject: Rajesh, I can't be sure whether it would break anything, or not; although, I've only had an update cause issues only once that I remember. At that time all I had to do was restart mariadb server. You could do a 'yum update openssl openssl-devel' and find out what packages would be updated. If it were only the two and issues did occur you could always downgrade easily. Eric On 9/6/2017 9:28 AM, Rajesh M wrote: > any chance this may break anything ? > > rajesh > > ----- Original Message ----- > From: Eric Broch [mailto:ebr...@whitehorsetc.com] > To: qmailtoaster-list@qmailtoaster.com > Sent: Wed, 6 Sep 2017 08:26:39 -0600 > Subject: > > Looks like you have an older version of openssl and openssl-devel on the > > servers that didn't work. > > 1.0.1e-16.el6_5.15 (failed) > > 1.0.1e-48.el6_8.4 (worked) > > can you upgrade? > > > On 9/6/2017 8:16 AM, Rajesh M wrote: >> eric, >> >> >> 152 -- did not work >> crypto-utils 2.4.1-24.2.el6 >> mod_ssl 2.2.15-31.el6.centos >> nss_compat_ossl 0.9.6-1.el6 >> openssl 1.0.1e-16.el6_5.15 >> openssl-devel 1.0.1e-16.el6_5.15 >> perl-Crypt-OpenSSL-Bignum 0.04-8.1.el6 >> perl-Crypt-OpenSSL-Random 0.04-9.1.el6 >> perl-Crypt-OpenSSL-RSA 0.25-10.1.el6 >> perl-IO-Socket-SSL 1.31-2.el6 >> perl-Net-SSLeay 1.35-9.el6 >> >> 154 - did not work >> crypto-utils 2.4.1-24.2.el6 >> mod_ssl 2.2.15-31.el6.centos >> openssl 1.0.1e-16.el6_5.15 >> openssl-devel 1.0.1e-16.el6_5.15 >> perl-Crypt-OpenSSL-Bignum 0.04-8.1.el6 >> perl-Crypt-OpenSSL-Random 0.04-9.1.el6 >> perl-Crypt-OpenSSL-RSA 0.25-10.1.el6 >> perl-IO-Socket-SSL 1.31-2.el6 >> perl-Net-SSLeay 1.35-9.el6 >> >> 137 -- worked >> mod_ssl 2.2.15-54.el6.centos >> nss_compat_ossl 0.9.6-2.el6_7 >> openssl 1.0.1e-48.el6_8.4 >> openssl-devel 1.0.1e-48.el6_8.4 >> perl-Crypt-OpenSSL-Bignum 0.04-8.1.el6 >> perl-Crypt-OpenSSL-Random 0.04-9.1.el6 >> perl-Crypt-OpenSSL-RSA 0.25-10.1.el6 >> perl-Crypt-SSLeay 0.57-17.el6 >> perl-IO-Socket-SSL 1.31-2.el6 >> perl-Net-SSLeay 1.35-9.el6 >> pyOpenSSL 0.13.1-2.el6 >> >> 153 - worked >> crypto-utils 2.4.1-24.2.el6 >> mod_ssl 2.2.15-31.el6.centos >> nss_compat_ossl 0.9.6-1.el6 >> openssl 1.0.1e-48.el6_8.3 >> openssl-devel 1.0.1e-48.el6_8.3 >> perl-Crypt-OpenSSL-Bignum 0.04-8.1.el6 >> perl-Crypt-OpenSSL-Random 0.04-9.1.el6 >> perl-Crypt-OpenSSL-RSA 0.25-10.1.el6 >> perl-Crypt-SSLeay 0.57-16.el6 >> perl-IO-Socket-SSL 1.31-2.el6 >> perl-Net-SSLeay 1.35-9.el6 >> pyOpenSSL 0.10-2.el6 >> >> >> rajesh >> >> ----- Original Message ----- >> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >> To: 24x7ser...@24x7server.net >> Sent: Wed, 6 Sep 2017 06:52:45 -0600 >> Subject: >> >> Are those the exact modules on all the servers, the ones that worked and >> the ones that didn't? >> >> >> On 9/6/2017 1:00 AM, Rajesh M wrote: >>> eric >>> >>> these are the ssl related packages i have on my server which fails to >>> compile >>> >>> crypto-utils 2.4.1-24.2.el6 >>> mod_ssl 2.2.15-31.el6.centos >>> nss_compat_ossl 0.9.6-1.el6 >>> openssl 1.0.1e-16.el6_5.15 >>> openssl-devel 1.0.1e-16.el6_5.15 >>> perl-Crypt-OpenSSL-Bignum 0.04-8.1.el6 >>> perl-Crypt-OpenSSL-Random 0.04-9.1.el6 >>> perl-Crypt-OpenSSL-RSA 0.25-10.1.el6 >>> perl-IO-Socket-SSL 1.31-2.el6 >>> perl-Net-SSLeay 1.35-9.el6 >>> >>> thanks >>> rajesh >>> >>> ----- Original Message ----- >>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>> To: 24x7ser...@24x7server.net >>> Sent: Tue, 5 Sep 2017 21:53:35 -0600 >>> Subject: >>> >>> What other ssl packages do you have. These are on mine. >>> >>> python-backports-ssl_match_hostname-3.4.0.2-5.el6.noarch >>> mod_ssl-2.2.15-60.el6.centos.4.x86_64 >>> openssl-devel-1.0.1e-57.el6.x86_64 >>> openssl-1.0.1e-57.el6.x86_64 >>> >>> >>> On 9/5/2017 7:12 PM, Rajesh M wrote: >>>> on all my servers >>>> >>>> OpenSSL 1.0.1e-fips 11 Feb 2013 >>>> >>>> it compiled in two servers and it threw the same errors in two server. >>>> >>>> rajesh >>>> >>>> >>>> >>>> >>>> ----- Original Message ----- >>>> From: Eric Broch [mailto:ebr...@whitehorsetc.com] >>>> To: 24x7ser...@24x7server.net >>>> Sent: Tue, 5 Sep 2017 15:05:45 -0600 >>>> Subject: >>>> >>>> What version of opennssl do you have and what ssl packages do you have? >>>> >>>> >>>> On 9/5/2017 10:13 AM, Rajesh M wrote: >>>>> eric >>>>> >>>>> i am trying to update dovecot to version from >>>>> CentOS6/qmt/srpms/updates/dovecot-2.2.29.1-15.qt.src.rpm >>>>> >>>>> rpmbuild --rebuild --define "dist .qt.el6" dovecot-2.2.29.1-15.qt.src.rpm >>>>> >>>>> >>>>> but getting error as follows on one server only >>>>> >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota' >>>>> Making check in quota-clone >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota-clone' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/quota-clone' >>>>> Making check in imap-quota >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-quota' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-quota' >>>>> Making check in pop3-migration >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/pop3-migration' >>>>> for bin in test-pop3-migration-plugin; do \ >>>>> if ! ./$bin; then exit 1; fi; \ >>>>> done >>>>> pop3 migration get hdr sha1 .......................................... : >>>>> ok >>>>> 0 / 1 tests failed >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/pop3-migration' >>>>> Making check in replication >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/replication' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/replication' >>>>> Making check in snarf >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/snarf' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/snarf' >>>>> Making check in stats >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/stats' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/stats' >>>>> Making check in imap-stats >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-stats' >>>>> make[3]: Nothing to be done for `check'. >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/imap-stats' >>>>> Making check in mail-crypt >>>>> make[3]: Entering directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/mail-crypt' >>>>> for bin in test-mail-global-key test-mail-key; do \ >>>>> if ! env NOUNDEF=1 ./$bin; then exit 1; fi; \ >>>>> done >>>>> try_load_keys ........................................................ : >>>>> ok >>>>> test_empty_keyset .................................................... : >>>>> ok >>>>> 0 / 2 tests failed >>>>> generate user key .................................................... : >>>>> ok >>>>> generate inbox key ................................................... : >>>>> ok >>>>> cache reset .......................................................... : >>>>> ok >>>>> verify keys .......................................................... : >>>>> ok >>>>> test-mail-key.c:429: Assert failed: mail_crypt_get_private_key(t, >>>>> mcp_old_box_key_id, FALSE, FALSE, &privkey, &error) > 0 >>>>> test: random seed #2 was 2074645272 >>>>> test-mail-key(root): Error: >>>>> mail_crypt_get_private_key(7c9a1039ea2e4fed73e81dd3ffc3fa22ea4a28352939adde7bf8ea858b00fa4f) >>>>> failed: Cannot decrypt key >>>>> 7c9a1039ea2e4fed73e81dd3ffc3fa22ea4a28352939adde7bf8ea858b00fa4f: >>>>> error:100AE081:elliptic curve routines:EC_GROUP_new_by_curve_name:unknown >>>>> group >>>>> test-mail-key.c:438: Assert failed: privkey != NULL >>>>> old keys ............................................................. : >>>>> FAILED >>>>> 1 / 5 tests failed >>>>> make[3]: *** [check-test] Error 1 >>>>> make[3]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins/mail-crypt' >>>>> make[2]: *** [check-recursive] Error 1 >>>>> make[2]: Leaving directory >>>>> `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src/plugins' >>>>> make[1]: *** [check-recursive] Error 1 >>>>> make[1]: Leaving directory `/root/rpmbuild/BUILD/dovecot-2.2.29.1/src' >>>>> make: *** [check-recursive] Error 1 >>>>> error: Bad exit status from /var/tmp/rpm-tmp.LDWEGt (%check) >>>>> >>>>> >>>>> RPM build errors: >>>>> Bad exit status from /var/tmp/rpm-tmp.LDWEGt (%check) >>>>> >>>>> >>>>> thanks >>>>> rajesh >>>>> >>>>> >>>>> >>>>> >>>>> --------------------------------------------------------------------- >>>>> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com >>>>> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com > For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com -- Eric Broch White Horse Technical Consulting (WHTC)
--------------------------------------------------------------------- To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
