Upgrading Solaris /usr/bin/ssh: symbol ENGINE load pk11: symbol not found
- Product: Aleph
- Product Version: 21, 22, 23
- Relevant for Installation Type: Dedicated-Direct, Direct, Local
Description
Case 1: After upgrading ssh from Sun-SSH 1.1.6 to 1.1.8 we experience problems in executing ssh:
ld.so.1: ssh: fatal: relocation error: file /usr/bin/ssh: symbol ENGINE_load_pk11: referenced symbol not found
Case 2: After upgrading Solaris 10, /bin/ssh no longer works when logged in as aleph user. (The /bin/ssh binary is built against the openssl libcrypto.so.1.0.0 library (the previous version was built against the openssl libcrypto.so.0.9.7 library). When logged in as the aleph user, LD_LIBRARY_PATH has /exlibris/aleph/a22_1/product/local/openssl/lib at the beginning of the PATH. As a result, /bin/ssh is using
/exlibris/aleph/a22_1/product/local/openssl/lib/libcrypto.so.1.0.0 and this is leading to the error:
symbol not found: ENGINE_load_pk11 (/usr/bin/ssh)
Resolution
Solution 1: We found out that changing the LD_LIBRARY_PATH setting from:
/exlibris/aleph/a22_1/product/local/cobol/lib:/exlibris/aleph/a22_1/product/lib:/exlibris/aleph/a22_1/product/local/perl/lib:/exlibris/aleph/a22_1/product/local/libxml/lib:/exlibris/aleph/a22_1/product/local/libxslt/lib:/exlibris/aleph/a22_1/product/local/openssl/lib:/opt/SUNWspro/prod/lib:/usr/sfw/lib:/exlibris/aleph/a22_1/product/local/gcc/lib:/lib:/usr/lib:/usr/ucblib:/exlibris/product/instantclient_11_2:/exlibris/app/oracle/product/11r2/lib32:/exlibris/app/oracle/product/11r2/lib:/exlibris/app/oracle/product/11r2/ctx/lib:/exlibris/aleph/a22_1/product/local/java/jre/lib/sparc:/exlibris/aleph/a22_1/product/local/java/jre/lib/sparc/server
to
/exlibris/aleph/a22_1/product/local/cobol/lib:/exlibris/aleph/a22_1/product/lib:/exlibris/aleph/a22_1/product/local/perl/lib:/exlibris/aleph/a22_1/product/local/libxml/lib:/exlibris/aleph/a22_1/product/local/libxslt/lib:/opt/SUNWspro/prod/lib:/usr/sfw/lib:/exlibris/aleph/a22_1/product/local/gcc/lib:/lib:/usr/lib:/usr/ucblib:/exlibris/product/instantclient_11_2:/exlibris/app/oracle/product/11r2/lib32:/exlibris/app/oracle/product/11r2/lib:/exlibris/app/oracle/product/11r2/ctx/lib:/exlibris/aleph/a22_1/product/local/java/jre/lib/sparc:/exlibris/aleph/a22_1/product/local/java/jre/lib/sparc/server
solves the problem, i.e. deleting '/exlibris/aleph/a22_1/product/local/openssl/lib' from the LD_LIBRARY_PATH setting.
Solution 2: We were able to fix the problem by renaming the Ex-Libris-supplied
libcrypto.so.1.0.0, and then creating a symbolic link to the system version of the library (see Additional information below).