OpenSSL (Yum) update error as seen in nightly cron email

mtindor

Well-Known Member
Sep 14, 2004
1,463
114
193
inside a catfish
cPanel Access Level
Root Administrator
Running:

Code:
WHM 11.28.52
CENTOS 5.5 i686 virtuozzo on servername
In the nightly cron email I see an error about installing an OpenSSL RPM. However, if I go to the server itself and do "yum check-update" it doesn't reveal that there are any packages needing updated.

Here is the info from the nightly cron email (scroll down to the bottom in the window):

Code:
Installing system packages and perl modules...Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: mirrors.netdna.com
 * base: mirror.ubiquityservers.com
 * extras: mirror.cogentco.com
 * updates: mirror.cogentco.com
Excluding Packages in global exclude list
Finished
Setting up Install Process
Package 30:bind-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-devel-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-libs-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-utils-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package bzip2-1.0.3-6.el5_5.i386 already installed and latest version
Package crontabs-1.10-8.noarch already installed and latest version
Package expect-5.43.0-5.1.i386 already installed and latest version
Package freetype-2.2.1-28.el5_5.1.i386 already installed and latest version
Package freetype-devel-2.2.1-28.el5_5.1.i386 already installed and latest version
Package gcc-4.1.2-48.el5.i386 already installed and latest version
Package gcc-c++-4.1.2-48.el5.i386 already installed and latest version
Package gd-2.0.33-9.4.el5_4.2.i386 already installed and latest version
Package gd-devel-2.0.33-9.4.el5_4.2.i386 already installed and latest version
Package gd-progs-2.0.33-9.4.el5_4.2.i386 already installed and latest version
No package gd-utils available.
Package gettext-0.14.6-4.el5.i386 already installed and latest version
Package gettext-devel-0.14.6-4.el5.i386 already installed and latest version
Package glibc-devel-2.5-49.el5_5.7.i386 already installed and latest version
Package gnupg-1.4.5-14.el5_5.1.i386 already installed and latest version
Package libgcc-4.1.2-48.el5.i386 already installed and latest version
No package libgd1 available.
No package libgd1-devel available.
No package libmysqlclient10-dev available.
No package libxml available.
No package libxml-devel available.
Package libstdc++-4.1.2-48.el5.i386 already installed and latest version
Package libstdc++-devel-4.1.2-48.el5.i386 already installed and latest version
Package which-2.16-7.i386 already installed and latest version
Package lsof-4.78-3.i386 already installed and latest version
Package sysstat-7.0.2-3.el5_5.1.i386 already installed and latest version
Package libxml2-2.6.26-2.1.2.8.el5_5.1.i386 already installed and latest version
Package libxml2-devel-2.6.26-2.1.2.8.el5_5.1.i386 already installed and latest version
Package gamin-0.1.7-8.el5.i386 already installed and latest version
Package gamin-devel-0.1.7-8.el5.i386 already installed and latest version
Package lynx-2.8.5-28.1.el5_2.1.i386 already installed and latest version
Package openssh-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssh-clients-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssh-server-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssl-devel-0.9.8e-12.el5_5.7.i386 already installed and latest version
No package openssl-misc available.
No package perl-CPAN available.
Package sharutils-4.6.1-2.i386 already installed and latest version
No package tcp_wrappers-devel available.
No package ucd-snmp available.
No package ucd-snmp-devel available.
No package ucd-snmp-utils available.
Package urw-fonts-2.3-6.1.1.noarch already installed and latest version
No package XFree86-devel available.
No package XFree86-libs available.
Package libXpm-devel-3.5.5-3.i386 already installed and latest version
Package libX11-devel-1.0.3-11.el5.i386 already installed and latest version
Package 4:vixie-cron-4.1-77.el5_4.1.i386 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package openssl.i686 0:0.9.8e-12.el5_5.7 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch         Version                     Repository       Size
================================================================================
Installing:
 openssl         i686         0.9.8e-12.el5_5.7           updates         1.4 M

Transaction Summary
================================================================================
Install       1 Package(s)
Upgrade       0 Package(s)

Total size: 1.4 M
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test


Transaction Check Error:
 package openssl-0.9.8e-12.el5_5.7.i686 is already installed
 file /lib/.libcrypto.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/.libssl.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/libcrypto.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/libssl.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/bin/openssl from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/lib4758cca.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libaep.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libatalla.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libchil.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libcswift.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libgmp.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libnuron.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libsureware.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libubsec.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386

Error Summary
-------------
 

mtindor

Well-Known Member
Sep 14, 2004
1,463
114
193
inside a catfish
cPanel Access Level
Root Administrator
Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.

The openssl errors are due to a i386 build package mistakenly being uploaded to the i686 repository by the CentOS team. They have since fixed the issue and we have enabled easyapache to correct the problem the next time it is ran. To immediately fix the issue without having to start easyapache you can run the following commands:

rpm -e --justdb --nodeps openssl.i386
yum install openssl
Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike
 

MindStar

Member
Mar 29, 2007
19
0
151
UK
Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.



Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike
Hi Mike,

thanks for sharing this tip, it's cured the problem on my VPS :)

Mark.
 

mtindor

Well-Known Member
Sep 14, 2004
1,463
114
193
inside a catfish
cPanel Access Level
Root Administrator
Hi Mike,

thanks for sharing this tip, it's cured the problem on my VPS :)

Mark.
You're welcome. I had this occur on a few servers I maintain, and this solution resolved the problem in each of those cases as well. Thanks should go to the cPanel staff though, who quickly provided me with the solution.

Mike
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,544
13
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter

MindStar

Member
Mar 29, 2007
19
0
151
UK
Hi,

since I used this fix I am now unable to use easyApache as it reports a conflict with the openssl package :confused:

I've tried removing and re-installing openssl, but keep getting the same message - weirdly the nightly cron update does not report any errors :(

Transaction Check Error:
package openssl-0.9.8e-12.el5_5.7.i386 is already installed
file /lib/.libcrypto.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/.libssl.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/libcrypto.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/libssl.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/bin/openssl from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/lib4758cca.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libaep.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libatalla.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libchil.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libcswift.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libgmp.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libnuron.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libsureware.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libubsec.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
Error Summary
 

MindStar

Member
Mar 29, 2007
19
0
151
UK
Having just checked the nightly cron email, I now see that it too is reporting the same conflict for openssl i386 0.9.8e-12.el5_5.7
 

cPanelDon

cPanel Quality Assurance Analyst
Staff member
Nov 5, 2008
2,544
13
268
Houston, Texas, U.S.A.
cPanel Access Level
DataCenter Provider
Twitter
Hi,

since I used this fix I am now unable to use easyApache as it reports a conflict with the openssl package :confused:

I've tried removing and re-installing openssl, but keep getting the same message - weirdly the nightly cron update does not report any errors :(
Having just checked the nightly cron email, I now see that it too is reporting the same conflict for openssl i386 0.9.8e-12.el5_5.7
Do you happen to have a support ticket open? If not, please submit a ticket so that we may take a look at your unique issue seen via EasyApache. Please let me know your ticket ID number when available.

For reference, you may either click here to submit a support request or do so using WebHost Manager via the following menu path: WHM: Main >> Support >> Support Center >> Contact cPanel
 

BianchiDude

Well-Known Member
PartnerNOC
Jul 2, 2005
617
0
166
I'm having this issue as well, does anyone have a fix? rpm -e didn't work.

Not sure why its trying to install a i686 package on a 32-bit system either ????????????
 

ddot

Registered
Aug 20, 2011
1
0
51
Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.



Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike
this seemed to work for me as well...
 

kbisignani

Member
Jan 29, 2012
19
0
51
cPanel Access Level
Root Administrator
Thought it worth mentioning to the collective - I just started to run in to this issue (funny enough, over a year after it was first reported - and resolved!)

For the record, I run VPSs, currently on WHM 11.30.5 build 6 on CentOS 5.7 i686. Sure enough, the OpenSSL conflicts came up in YUM as I was trying to run EasyApache.

Running the command mentioned previously in SSH

rpm -e --justdb --nodeps openssl.i386
and then tried EasyApache and it worked great. So far nothing appears to be broken. :p
 

FRCorey

Member
Feb 1, 2012
8
0
51
cPanel Access Level
Root Administrator
Is this the reason my https sessions keep dying every few minutes? Every since Jan 30th https sessions imap secure sessions ssh are all having intermittent issues. Did an update to openssl break things?

using easy apache as well.
 

cPanelTristan

Quality Assurance Analyst
Staff member
Oct 2, 2010
7,607
43
348
somewhere over the rainbow
cPanel Access Level
Root Administrator
Did you try checking "yum update" to see if you receive an error message? It isn't the issue if you aren't having an error message.