Bug 56269

Summary: libcrypto and libssl libraries are in wrong directory and have bad versions
Product: [Retired] Red Hat Linux Reporter: Need Real Name <bart>
Component: opensslAssignee: Nalin Dahyabhai <nalin>
Status: CLOSED NOTABUG QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: 7.2   
Target Milestone: ---   
Target Release: ---   
Hardware: i386   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2001-11-14 20:04:17 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Description Need Real Name 2001-11-14 20:04:12 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:0.9.4)
Gecko/20011019 Netscape6/6.2

Description of problem:
The term package monkey is often used to describe RPM maintainers,
but RH package monkeys must truly have the IQ of a monkey...

The package openssl-0.9.6b-8 contains the files
  /lib/libcrypto.so.0.9.6b
  /lib/libssl.so.0.9.6b
and the symlinks
  /lib/libcrypto.so.2
  /lib/libssl.so.2

point to these files, respectively.  First of all, where does
the '2' come from in libssl.so.2 and libcrypto.so.2?  These 
files should be called libssl.so.0 and libcrypto.so.0.  

Also, the package openssl-devel-0.9.6b-8 contains the files 
  /usr/lib/libssl.so
  /usr/lib/libcrypto.so

There is no need for the -devel package to contain shared libs
since the base package does.  Why are they in a different directory
(/usr/lib instead of /lib)?

Does RedHat intentionally pull a MicroSoft and try to make their 
distro incompatible with everyone else?  Seriously, why do you 
make it impossible for packages built on other distros to work
on RedHat Linux??

Please fix RedHat linux so that the symlinks libcrypto.so.0 and 
libssl.so.0 exist.  Also, get rid of libcrypto.so.2 and
libssl.so.2, as these have no reason to exist (at least not
until the version of openssl is >= 2.0.0.
  

Version-Release number of selected component (if applicable):


How reproducible:
Always

Steps to Reproduce:
1.Install RedHat 7.2
2.type 'locate libssl' and 'locate libcrypto'
3.Stare in awe at the blatant stupidity that appears before you on your screen.
	

Expected Results:  There should be libcrypto.so.0 and libssl.so.0 symlinks,
and there should not be shared libs for openssl in both
/lib and /usr/lib.

Additional info:

Comment 1 Joe Orton 2001-11-23 16:04:15 UTC
The library sonames have changed from 0 through 2 because subsequent release of
OpenSSL are not binary compatible with each other. If we didn't do this, then
applications would break e.g. when users upgraded from 0.9.6 to 0.9.6b.

The -devel package only contains symlinks to the real .so files. If they weren't
there, applications can't link against the shared libraries.

The compatibility issue is not best addressed here - maybe you can try the LSB
effort?