OpenSSL (Yum) update error as seen in nightly cron email

[mtindor]

Running:

WHM 11.28.52
CENTOS 5.5 i686 virtuozzo on servername

In the nightly cron email I see an error about installing an OpenSSL RPM. However, if I go to the server itself and do "yum check-update" it doesn't reveal that there are any packages needing updated.

Here is the info from the nightly cron email (scroll down to the bottom in the window):

Installing system packages and perl modules...Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
 * addons: mirrors.netdna.com
 * base: mirror.ubiquityservers.com
 * extras: mirror.cogentco.com
 * updates: mirror.cogentco.com
Excluding Packages in global exclude list
Finished
Setting up Install Process
Package 30:bind-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-devel-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-libs-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package 30:bind-utils-9.3.6-4.P1.el5_5.3.i386 already installed and latest version
Package bzip2-1.0.3-6.el5_5.i386 already installed and latest version
Package crontabs-1.10-8.noarch already installed and latest version
Package expect-5.43.0-5.1.i386 already installed and latest version
Package freetype-2.2.1-28.el5_5.1.i386 already installed and latest version
Package freetype-devel-2.2.1-28.el5_5.1.i386 already installed and latest version
Package gcc-4.1.2-48.el5.i386 already installed and latest version
Package gcc-c++-4.1.2-48.el5.i386 already installed and latest version
Package gd-2.0.33-9.4.el5_4.2.i386 already installed and latest version
Package gd-devel-2.0.33-9.4.el5_4.2.i386 already installed and latest version
Package gd-progs-2.0.33-9.4.el5_4.2.i386 already installed and latest version
No package gd-utils available.
Package gettext-0.14.6-4.el5.i386 already installed and latest version
Package gettext-devel-0.14.6-4.el5.i386 already installed and latest version
Package glibc-devel-2.5-49.el5_5.7.i386 already installed and latest version
Package gnupg-1.4.5-14.el5_5.1.i386 already installed and latest version
Package libgcc-4.1.2-48.el5.i386 already installed and latest version
No package libgd1 available.
No package libgd1-devel available.
No package libmysqlclient10-dev available.
No package libxml available.
No package libxml-devel available.
Package libstdc++-4.1.2-48.el5.i386 already installed and latest version
Package libstdc++-devel-4.1.2-48.el5.i386 already installed and latest version
Package which-2.16-7.i386 already installed and latest version
Package lsof-4.78-3.i386 already installed and latest version
Package sysstat-7.0.2-3.el5_5.1.i386 already installed and latest version
Package libxml2-2.6.26-2.1.2.8.el5_5.1.i386 already installed and latest version
Package libxml2-devel-2.6.26-2.1.2.8.el5_5.1.i386 already installed and latest version
Package gamin-0.1.7-8.el5.i386 already installed and latest version
Package gamin-devel-0.1.7-8.el5.i386 already installed and latest version
Package lynx-2.8.5-28.1.el5_2.1.i386 already installed and latest version
Package openssh-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssh-clients-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssh-server-4.3p2-41.el5_5.1.i386 already installed and latest version
Package openssl-devel-0.9.8e-12.el5_5.7.i386 already installed and latest version
No package openssl-misc available.
No package perl-CPAN available.
Package sharutils-4.6.1-2.i386 already installed and latest version
No package tcp_wrappers-devel available.
No package ucd-snmp available.
No package ucd-snmp-devel available.
No package ucd-snmp-utils available.
Package urw-fonts-2.3-6.1.1.noarch already installed and latest version
No package XFree86-devel available.
No package XFree86-libs available.
Package libXpm-devel-3.5.5-3.i386 already installed and latest version
Package libX11-devel-1.0.3-11.el5.i386 already installed and latest version
Package 4:vixie-cron-4.1-77.el5_4.1.i386 already installed and latest version
Resolving Dependencies
--> Running transaction check
---> Package openssl.i686 0:0.9.8e-12.el5_5.7 set to be updated
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
 Package         Arch         Version                     Repository       Size
================================================================================
Installing:
 openssl         i686         0.9.8e-12.el5_5.7           updates         1.4 M

Transaction Summary
================================================================================
Install       1 Package(s)
Upgrade       0 Package(s)

Total size: 1.4 M
Downloading Packages:
Running rpm_check_debug
Running Transaction Test
Finished Transaction Test


Transaction Check Error:
 package openssl-0.9.8e-12.el5_5.7.i686 is already installed
 file /lib/.libcrypto.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/.libssl.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/libcrypto.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /lib/libssl.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/bin/openssl from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/lib4758cca.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libaep.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libatalla.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libchil.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libcswift.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libgmp.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libnuron.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libsureware.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386
 file /usr/lib/openssl/engines/libubsec.so from install of openssl-0.9.8e-12.el5_5.7.i686 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i386

Error Summary
-------------

 

[sebby]

Starting a few days ago, getting the exact same error during daily system updates.

Running Centos 5.5 and latest cPanel stable build.

 

[mattress]

*Tagging thread*

I'm getting this too.

 

[Toliman]

I'm getting this too.

 

[ministero]

i'm getting the same error on all my cpanel servers, no fix yet?

 

[mtindor]

Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.

The openssl errors are due to a i386 build package mistakenly being uploaded to the i686 repository by the CentOS team. They have since fixed the issue and we have enabled easyapache to correct the problem the next time it is ran. To immediately fix the issue without having to start easyapache you can run the following commands:

rpm -e --justdb --nodeps openssl.i386
yum install openssl

Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike

 

[MindStar]

Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.



Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike

Hi Mike,

thanks for sharing this tip, it's cured the problem on my VPS

Mark.

 

[mtindor]

Hi Mike,

thanks for sharing this tip, it's cured the problem on my VPS

Mark.

You're welcome. I had this occur on a few servers I maintain, and this solution resolved the problem in each of those cases as well. Thanks should go to the cPanel staff though, who quickly provided me with the solution.

Mike

 

[jayz7]

Im getting the same problem, please post a solution....

 

[cPanelDon]

Im getting the same problem, please post a solution....

The solution was posted earlier in this thread; please carefully review the following post: OpenSSL (Yum) update error as seen in nightly cron email

 

[MindStar]

Hi,

since I used this fix I am now unable to use easyApache as it reports a conflict with the openssl package

I've tried removing and re-installing openssl, but keep getting the same message - weirdly the nightly cron update does not report any errors

Transaction Check Error:
package openssl-0.9.8e-12.el5_5.7.i386 is already installed
file /lib/.libcrypto.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/.libssl.so.0.9.8e.hmac from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/libcrypto.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /lib/libssl.so.0.9.8e from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/bin/openssl from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/lib4758cca.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libaep.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libatalla.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libchil.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libcswift.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libgmp.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libnuron.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libsureware.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
file /usr/lib/openssl/engines/libubsec.so from install of openssl-0.9.8e-12.el5_5.7.i386 conflicts with file from package openssl-0.9.8e-12.el5_5.7.i686
Error Summary

 

[MindStar]

Having just checked the nightly cron email, I now see that it too is reporting the same conflict for openssl i386 0.9.8e-12.el5_5.7

 

[cPanelDon]

Hi,

since I used this fix I am now unable to use easyApache as it reports a conflict with the openssl package

I've tried removing and re-installing openssl, but keep getting the same message - weirdly the nightly cron update does not report any errors

Having just checked the nightly cron email, I now see that it too is reporting the same conflict for openssl i386 0.9.8e-12.el5_5.7

Do you happen to have a support ticket open? If not, please submit a ticket so that we may take a look at your unique issue seen via EasyApache. Please let me know your ticket ID number when available.

For reference, you may either click here to submit a support request or do so using WebHost Manager via the following menu path: WHM: Main >> Support >> Support Center >> Contact cPanel

 

[BianchiDude]

I'm having this issue as well, does anyone have a fix? rpm -e didn't work.

Not sure why its trying to install a i686 package on a 32-bit system either ????????????

 

[ddot]

Knowing that these forums aren't a means of official support, i opened a ticket -- ten minutes later I had my answer.



Your mileage may vary. Before doing this, you should make sure that the errors you are getting are exactly like the ones I was getting. This worked for me just fine... and cPanel support is the best!

Mike

this seemed to work for me as well...

 

[kbisignani]

Thought it worth mentioning to the collective - I just started to run in to this issue (funny enough, over a year after it was first reported - and resolved!)

For the record, I run VPSs, currently on WHM 11.30.5 build 6 on CentOS 5.7 i686. Sure enough, the OpenSSL conflicts came up in YUM as I was trying to run EasyApache.

Running the command mentioned previously in SSH

rpm -e --justdb --nodeps openssl.i386

and then tried EasyApache and it worked great. So far nothing appears to be broken. :p

 

[FRCorey]

Is this the reason my https sessions keep dying every few minutes? Every since Jan 30th https sessions imap secure sessions ssh are all having intermittent issues. Did an update to openssl break things?

using easy apache as well.

 

[cPanelTristan]

Did you try checking "yum update" to see if you receive an error message? It isn't the issue if you aren't having an error message.