Bug 688009

Summary: undefined symbol: SSLv2_client_method
Product: [openSUSE] openSUSE 12.1 Reporter: Alin M Elena <alinm.elena>
Component: BasesystemAssignee: Cristian Rodríguez <crrodriguez>
Status: RESOLVED DUPLICATE QA Contact: E-mail List <qa-bugs>
Severity: Major    
Priority: P5 - None CC: bruno, per
Version: Factory   
Target Milestone: ---   
Hardware: x86-64   
OS: SUSE Other   
Whiteboard:
Found By: --- Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---

Description Alin M Elena 2011-04-16 19:50:56 UTC
User-Agent:       Mozilla/5.0 (X11; U; Linux x86_64; en-GB) AppleWebKit/533.3 (KHTML, like Gecko) rekonq Safari/533.3

trying to start current version of virtual box... insalled from the oracle rpm...


[alin@abbaton:~]: VirtualBox 
VirtualBox: Error -610 in supR3HardenedMainInitRuntime!
VirtualBox: dlopen("/usr/lib/virtualbox/VBoxRT.so",) failed: /usr/lib64/libcurl.so.4: undefined symbol: SSLv2_client_method

VirtualBox: Tip! It may help to reinstall VirtualBox.

Reproducible: Always

Steps to Reproduce:
1.
2.
3.
Comment 1 Per Jessen 2011-04-17 08:41:07 UTC
Do you have libopenssl installed?  SSLv2_client_method is found in 
/usr/lib*/libssl.so*
Comment 2 Bruno Friedmann 2011-04-17 09:06:58 UTC
Same here but with apache2 

After zypper up on factory I've now a none working apache2 with SSL apache2 is dated from Feb 20

rcapache2 restart
httpd2-prefork: Syntax error on line 116 of /etc/apache2/httpd.conf: Syntax error on line 53 of
/etc/apache2/sysconfig.d/loadmodule.conf: Cannot load /usr/lib64/apache2-prefork/mod_ssl.so into server:
/usr/lib64/apache2-prefork/mod_ssl.so: undefined symbol: SSLv2_client_method

ldd /usr/lib64/apache2-prefork/mod_ssl.so
        linux-vdso.so.1 =>  (0x00007ffff4583000)
        libssl.so.1.0.0 => /lib64/libssl.so.1.0.0 (0x00007f7694a09000)
        libcrypto.so.1.0.0 => /lib64/libcrypto.so.1.0.0 (0x00007f7694658000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x00007f769443a000)
        libc.so.6 => /lib64/libc.so.6 (0x00007f76940cd000)
        libdl.so.2 => /lib64/libdl.so.2 (0x00007f7693ec9000)
        libz.so.1 => /lib64/libz.so.1 (0x00007f7693cb0000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f7694ed1000)

Did someone forget to rebuild after openssl-1.0.0d-21.1.x86_64.rpm update (dated Apr 15) ?

* Wed Apr 13 2011 crrodriguez@opensuse.org
- Fix engine loading issues [bnc#660452]
- Update AES-NI patch to upstream version 4
- Drop CVE-2011-0014.patch and replace it with pristine tarball
  of 1.0.0d which only fixes this vulnerability.

* Sat Apr 09 2011 crrodriguez@opensuse.org
- Correct last change

* Sat Apr 09 2011 crrodriguez@opensuse.org
- Disable SSLv2 support permanently,it must not be used.
- No longer requires -fno-strict-aliasing

so sslv2 dropped but what else to all the software which seems to use it 
like our own apache2 build ????
Comment 3 Bruno Friedmann 2011-04-17 09:16:02 UTC
bnc#660452 is not available to us.
Comment 4 Alin M Elena 2011-04-17 09:20:47 UTC
I have these installed

[alin@abbaton:~]: rpm -qa | grep openss
libopenssl1_0_0-1.0.0d-21.1.x86_64
libopenssl0_9_8-0.9.8m-9.1.x86_64
python-openssl-0.11-2.2.x86_64
openssh-5.8p1-3.1.x86_64
openssh-askpass-5.8p1-3.1.x86_64
libopenssl1_0_0-32bit-1.0.0d-21.1.x86_64
libopenssl-devel-1.0.0d-21.1.x86_64
libopenssl0_9_8-32bit-0.9.8m-9.1.x86_64
openssl-1.0.0d-21.1.x86_64


I suspect all we have to do is to have a 1.0.0d pm....

Alin
Comment 5 Alin M Elena 2011-04-17 09:30:57 UTC
marked as duplicate

*** This bug has been marked as a duplicate of bug 688010 ***
Comment 6 Cristian Rodríguez 2011-04-17 13:28:39 UTC
I made a submit request more than 1 week ago that corrects this particular apache thing.
Comment 7 Cristian Rodríguez 2011-04-17 13:46:04 UTC
The "libcurl" thing, is also fixed since more than a week, but package has not been checked in, due to "stunnel" not been in factory, which is a non.sense reason,as stunnel has never been  required in the first place.