Bug 1173821

Summary: freeradius fails to start: libssl version mismatch
Product: [Fedora] Fedora Reporter: Jonas Sell <redhat>
Component: freeradiusAssignee: Nikolai Kondrashov <nikolai.kondrashov>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 21CC: jdennis, juriaan, kenny, kgagnon, lemenkov, mo.ucina, nikolai.kondrashov, nmavrogi
Target Milestone: ---Keywords: Reopened
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: freeradius-3.0.4-4.fc21 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2015-02-15 03:04:39 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Jonas Sell 2014-12-13 09:32:47 UTC
Description of problem: freeradius refuses to start on FC21 install (upgrade from FC20). Maybe a problem with OpenSSL?


Version-Release number of selected component (if applicable):
freeradius 3.0.3-4.fc21
OpenSSL 1.0.1j-fips 15 Oct 2014


How reproducible:
Starting freeradius, either in debug mode or via systemctl

Steps to Reproduce:
1. radiusd -X
2. fails immediately with "libssl version mismatch.built: 1000109f linked: 100010af"

Actual results:
freeraidus fails starting


Expected results:
freeradius starts normally


Additional info:

Comment 1 Nikos Mavrogiannopoulos 2014-12-17 15:43:34 UTC
A recompilation with the f21 libraries fixes the issue.

Comment 2 Nikos Mavrogiannopoulos 2014-12-18 16:11:15 UTC
Nikolai could you submit a new build for that package?

Comment 3 Fedora Update System 2014-12-19 13:36:17 UTC
freeradius-3.0.4-3.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/freeradius-3.0.4-3.fc21

Comment 4 Nikolai Kondrashov 2014-12-19 13:45:04 UTC
Thank you for the report, a rebuilt update is submitted.

Comment 5 Jonas Sell 2014-12-19 14:03:22 UTC
Working again! Thank you for your work! :)

Comment 6 Fedora Update System 2014-12-20 08:37:48 UTC
Package freeradius-3.0.4-3.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing freeradius-3.0.4-3.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2014-17323/freeradius-3.0.4-3.fc21
then log in and leave karma (feedback).

Comment 7 Fedora Update System 2014-12-25 05:31:56 UTC
freeradius-3.0.4-3.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.

Comment 8 mo.ucina 2015-01-15 09:13:07 UTC
Hello Guys,

I am using the arm version of this package and have similar issue with latest version .

root@BPi-R1 /etc/raddb # rpm -qa freeradius*
freeradius-utils-3.0.4-3.fc21.armv7hl
freeradius-3.0.4-3.fc21.armv7hl
root@BPi-R1 /etc/raddb # radiusd -X
libssl version mismatch.  built: 100010af linked: 100010bf

Comment 9 Nikos Mavrogiannopoulos 2015-01-15 10:20:38 UTC
Maybe it would make sense to disable that check completely in Fedora. Our openssl is supposed to keep binary compatibility, and we want to be able to update openssl without having freeradius stop working.

Comment 10 Nikolai Kondrashov 2015-01-15 10:25:27 UTC
Thanks, Nikos, I'll look into this.

Comment 11 Nikolai Kondrashov 2015-01-19 15:45:47 UTC
This seems to happen due to incorrect OpenSSL version parsing in FreeRADIUS. I'll be backporting a patch from upstream fixing this.

Comment 12 Fedora Update System 2015-01-19 20:13:51 UTC
freeradius-3.0.4-4.fc21 has been submitted as an update for Fedora 21.
https://admin.fedoraproject.org/updates/freeradius-3.0.4-4.fc21

Comment 13 Fedora Update System 2015-01-20 21:04:57 UTC
Package freeradius-3.0.4-4.fc21:
* should fix your issue,
* was pushed to the Fedora 21 testing repository,
* should be available at your local mirror within two days.
Update it with:
# su -c 'yum update --enablerepo=updates-testing freeradius-3.0.4-4.fc21'
as soon as you are able to.
Please go to the following url:
https://admin.fedoraproject.org/updates/FEDORA-2015-0936/freeradius-3.0.4-4.fc21
then log in and leave karma (feedback).

Comment 14 mo.ucina 2015-01-22 00:51:04 UTC
Hello Nikolai, Works fine on fedora arm . No issues noted so far . Appreciate your help .

Comment 17 Fedora Update System 2015-02-15 03:04:39 UTC
freeradius-3.0.4-4.fc21 has been pushed to the Fedora 21 stable repository.  If problems still persist, please make note of it in this bug report.