Bug 1562953

Summary: ca-certificates fails to install: Execution of /usr/bin/c_rehash aborted due to compilation errors
Product: [Fedora] Fedora Reporter: Ed <epvergara>
Component: opensslAssignee: Tomas Mraz <tmraz>
Status: CLOSED ERRATA QA Contact: Fedora Extras Quality Assurance <extras-qa>
Severity: high Docs Contact:
Priority: unspecified    
Version: 27CC: jorton, tmraz
Target Milestone: ---   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: openssl-1.1.0h-3.fc28 openssl-1.1.0h-3.fc27 openssl-1.1.0h-3.fc26 Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-04-05 11:48:56 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Ed 2018-04-02 18:22:43 UTC 
Description of problem:  Execution of /usr/bin/c_rehash fails with the following error.

[root@epvergara-fedora-20FXS0J700 certs]# /usr/bin/c_rehash 
Unknown regexp modifier "/k" at /usr/bin/c_rehash line 15, at end of line
Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line
No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir"
  (Might be a runaway multi-line // string starting on line 28)
syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir"
Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my"
Execution of /usr/bin/c_rehash aborted due to compilation errors.



Version-Release number of selected component (if applicable):
openssl-perl-1:1.1.0h-1.fc27.x86_64

How reproducible:
/usr/bin/c_rehash fails every time on execution

Steps to Reproduce:
# upgrade openssl-perl-1:1.1.0h-1.fc27.x86_64

[root@epvergara-fedora-20FXS0J700 certs]# dnf update openssl-perl
Last metadata expiration check: 0:13:21 ago on Mon 02 Apr 2018 10:56:17 AM PDT.
Dependencies resolved.
=====================================================================================================================================================================================
 Package                                       Arch                                   Version                                          Repository                               Size
=====================================================================================================================================================================================
Upgrading:
 openssl                                       x86_64                                 1:1.1.0h-1.fc27                                  updates                                 575 k
 openssl-devel                                 x86_64                                 1:1.1.0h-1.fc27                                  updates                                 1.9 M
 openssl-libs                                  x86_64                                 1:1.1.0h-1.fc27                                  updates                                 1.3 M
 openssl-perl                                  x86_64                                 1:1.1.0h-1.fc27                                  updates                                  73 k

Transaction Summary
=====================================================================================================================================================================================
Upgrade  4 Packages

Total download size: 3.8 M
Is this ok [y/N]: y
Downloading Packages:
(1/4): openssl-perl-1.1.0h-1.fc27.x86_64.rpm                                                                                                         100 kB/s |  73 kB     00:00    
(2/4): openssl-1.1.0h-1.fc27.x86_64.rpm                                                                                                              615 kB/s | 575 kB     00:00    
(3/4): openssl-libs-1.1.0h-1.fc27.x86_64.rpm                                                                                                         1.2 MB/s | 1.3 MB     00:01    
(4/4): openssl-devel-1.1.0h-1.fc27.x86_64.rpm                                                                                                        3.1 MB/s | 1.9 MB     00:00    
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                2.0 MB/s | 3.8 MB     00:01     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                             1/1 
  Upgrading        : openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                         1/8 
  Running scriptlet: openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                         1/8 
  Upgrading        : openssl-1:1.1.0h-1.fc27.x86_64                                                                                                                              2/8 
  Upgrading        : openssl-perl-1:1.1.0h-1.fc27.x86_64                                                                                                                         3/8 
  Upgrading        : openssl-devel-1:1.1.0h-1.fc27.x86_64                                                                                                                        4/8 
  Cleanup          : openssl-devel-1:1.1.0f-9.fc27.x86_64                                                                                                                        5/8 
  Cleanup          : openssl-perl-1:1.1.0f-9.fc27.x86_64                                                                                                                         6/8 
  Cleanup          : openssl-1:1.1.0f-9.fc27.x86_64                                                                                                                              7/8 
  Cleanup          : openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                         8/8 
  Running scriptlet: openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                         8/8 
Running as unit: run-raa1e2d4c1b5c44f397c9afcaaea1d992.service
Running as unit: run-rbf741757f8bf4a85875ee8cfb3fa4cd0.service
  Verifying        : openssl-perl-1:1.1.0h-1.fc27.x86_64                                                                                                                         1/8 
  Verifying        : openssl-1:1.1.0h-1.fc27.x86_64                                                                                                                              2/8 
  Verifying        : openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                         3/8 
  Verifying        : openssl-devel-1:1.1.0h-1.fc27.x86_64                                                                                                                        4/8 
  Verifying        : openssl-1:1.1.0f-9.fc27.x86_64                                                                                                                              5/8 
  Verifying        : openssl-devel-1:1.1.0f-9.fc27.x86_64                                                                                                                        6/8 
  Verifying        : openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                         7/8 
  Verifying        : openssl-perl-1:1.1.0f-9.fc27.x86_64                                                                                                                         8/8 

Upgraded:
  openssl.x86_64 1:1.1.0h-1.fc27           openssl-devel.x86_64 1:1.1.0h-1.fc27           openssl-libs.x86_64 1:1.1.0h-1.fc27           openssl-perl.x86_64 1:1.1.0h-1.fc27          

Complete!

Actual results:
[root@epvergara-fedora-20FXS0J700 certs]# /usr/bin/c_rehash 
Unknown regexp modifier "/k" at /usr/bin/c_rehash line 15, at end of line
Unknown regexp modifier "/W" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/3" at /usr/bin/c_rehash line 28, at end of line
Unknown regexp modifier "/2" at /usr/bin/c_rehash line 28, at end of line
No such class installdir at /usr/bin/c_rehash line 63, near "Prefix our installdir"
  (Might be a runaway multi-line // string starting on line 28)
syntax error at /usr/bin/c_rehash line 63, near "Prefix our installdir"
Can't redeclare "my" in "my" at /usr/bin/c_rehash line 68, near "my"
Execution of /usr/bin/c_rehash aborted due to compilation errors.


Expected results:
# dnf downgrade to openssl-perl.x86_64 1:1.1.0f-9.fc27


[root@epvergara-fedora-20FXS0J700 certs]# vim /etc/dnf/
automatic.conf  dnf.conf        plugins/        protected.d/    
[root@epvergara-fedora-20FXS0J700 certs]# vim /usr/bin/c
Display all 112 possibilities? (y or n)
[root@epvergara-fedora-20FXS0J700 certs]# vim /usr/bin/c_rehash 
[root@epvergara-fedora-20FXS0J700 certs]# dnf downgrade openssl-perl
Last metadata expiration check: 0:22:01 ago on Mon 02 Apr 2018 10:56:17 AM PDT.
Dependencies resolved.
=====================================================================================================================================================================================
 Package                                       Arch                                   Version                                           Repository                              Size
=====================================================================================================================================================================================
Downgrading:
 curl                                          x86_64                                 7.55.1-5.fc27                                     fedora                                 311 k
 libcurl                                       x86_64                                 7.55.1-5.fc27                                     fedora                                 272 k
 openssl                                       x86_64                                 1:1.1.0f-9.fc27                                   fedora                                 544 k
 openssl-devel                                 x86_64                                 1:1.1.0f-9.fc27                                   fedora                                 1.9 M
 openssl-libs                                  x86_64                                 1:1.1.0f-9.fc27                                   fedora                                 1.3 M
 openssl-perl                                  x86_64                                 1:1.1.0f-9.fc27                                   fedora                                  72 k

Transaction Summary
=====================================================================================================================================================================================
Downgrade  6 Packages

Total download size: 4.4 M
Is this ok [y/N]: y
Downloading Packages:
(1/6): openssl-perl-1.1.0f-9.fc27.x86_64.rpm                                                                                                         101 kB/s |  72 kB     00:00    
(2/6): openssl-1.1.0f-9.fc27.x86_64.rpm                                                                                                              708 kB/s | 544 kB     00:00    
(3/6): openssl-libs-1.1.0f-9.fc27.x86_64.rpm                                                                                                         1.5 MB/s | 1.3 MB     00:00    
(4/6): libcurl-7.55.1-5.fc27.x86_64.rpm                                                                                                              839 kB/s | 272 kB     00:00    
(5/6): curl-7.55.1-5.fc27.x86_64.rpm                                                                                                                 951 kB/s | 311 kB     00:00    
(6/6): openssl-devel-1.1.0f-9.fc27.x86_64.rpm                                                                                                        3.2 MB/s | 1.9 MB     00:00    
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                                                2.2 MB/s | 4.4 MB     00:01     
Running transaction check
Transaction check succeeded.
Running transaction test
Transaction test succeeded.
Running transaction
  Preparing        :                                                                                                                                                             1/1 
  Downgrading      : openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                        1/12 
  Running scriptlet: openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                        1/12 
  Downgrading      : openssl-1:1.1.0f-9.fc27.x86_64                                                                                                                             2/12 
  Downgrading      : libcurl-7.55.1-5.fc27.x86_64                                                                                                                               3/12 
  Running scriptlet: libcurl-7.55.1-5.fc27.x86_64                                                                                                                               3/12 
  Downgrading      : curl-7.55.1-5.fc27.x86_64                                                                                                                                  4/12 
  Downgrading      : openssl-perl-1:1.1.0f-9.fc27.x86_64                                                                                                                        5/12 
  Downgrading      : openssl-devel-1:1.1.0f-9.fc27.x86_64                                                                                                                       6/12 
  Erasing          : openssl-devel-1:1.1.0h-1.fc27.x86_64                                                                                                                       7/12 
  Erasing          : openssl-perl-1:1.1.0h-1.fc27.x86_64                                                                                                                        8/12 
  Erasing          : openssl-1:1.1.0h-1.fc27.x86_64                                                                                                                             9/12 
  Erasing          : curl-7.55.1-10.fc27.x86_64                                                                                                                                10/12 
  Erasing          : libcurl-7.55.1-10.fc27.x86_64                                                                                                                             11/12 
  Running scriptlet: libcurl-7.55.1-10.fc27.x86_64                                                                                                                             11/12 
  Erasing          : openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                       12/12 
  Running scriptlet: openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                       12/12 
Running as unit: run-ra44281c147154edcb4011269e45f4d50.service
Running as unit: run-r9100f34d72e94414a328a3c5dffe9520.service
  Verifying        : openssl-perl-1:1.1.0f-9.fc27.x86_64                                                                                                                        1/12 
  Verifying        : openssl-1:1.1.0f-9.fc27.x86_64                                                                                                                             2/12 
  Verifying        : openssl-libs-1:1.1.0f-9.fc27.x86_64                                                                                                                        3/12 
  Verifying        : openssl-devel-1:1.1.0f-9.fc27.x86_64                                                                                                                       4/12 
  Verifying        : libcurl-7.55.1-5.fc27.x86_64                                                                                                                               5/12 
  Verifying        : curl-7.55.1-5.fc27.x86_64                                                                                                                                  6/12 
  Verifying        : libcurl-7.55.1-10.fc27.x86_64                                                                                                                              7/12 
  Verifying        : openssl-1:1.1.0h-1.fc27.x86_64                                                                                                                             8/12 
  Verifying        : openssl-devel-1:1.1.0h-1.fc27.x86_64                                                                                                                       9/12 
  Verifying        : openssl-libs-1:1.1.0h-1.fc27.x86_64                                                                                                                       10/12 
  Verifying        : openssl-perl-1:1.1.0h-1.fc27.x86_64                                                                                                                       11/12 
  Verifying        : curl-7.55.1-10.fc27.x86_64                                                                                                                                12/12 

Downgraded:
  curl.x86_64 7.55.1-5.fc27             libcurl.x86_64 7.55.1-5.fc27   openssl.x86_64 1:1.1.0f-9.fc27   openssl-devel.x86_64 1:1.1.0f-9.fc27   openssl-libs.x86_64 1:1.1.0f-9.fc27  
  openssl-perl.x86_64 1:1.1.0f-9.fc27  

Complete!
[root@epvergara-fedora-20FXS0J700 certs]# vim /usr/bin/c_rehash 
[root@epvergara-fedora-20FXS0J700 certs]# /usr/bin/c_rehash 
Doing /etc/pki/tls/certs
WARNING: Skipping duplicate certificate ca-bundle.trust.crt



Additional info:
In the latest openssl package there's a regression in c_rehash script. Quotes
are missing in lines 15 and 16:

my $dir = /usr/lib/ssl;
my $prefix = /usr;
Comment 1 Ed 2018-04-02 18:41:06 UTC 
If I manually add the quotes on line 15 and 16, the script succeeds.

my $dir = "/usr/lib/ssl";
my $prefix = "/usr";
Comment 2 Fedora Update System 2018-04-03 13:37:16 UTC 
openssl-1.1.0h-3.fc28 has been submitted as an update to Fedora 28. https://bodhi.fedoraproject.org/updates/FEDORA-2018-d8685f3c77
Comment 3 Fedora Update System 2018-04-03 13:37:25 UTC 
openssl-1.1.0h-3.fc27 has been submitted as an update to Fedora 27. https://bodhi.fedoraproject.org/updates/FEDORA-2018-7ffd8dd0a0
Comment 4 Fedora Update System 2018-04-03 13:37:31 UTC 
openssl-1.1.0h-3.fc26 has been submitted as an update to Fedora 26. https://bodhi.fedoraproject.org/updates/FEDORA-2018-d63ce90642
Comment 5 Fedora Update System 2018-04-04 17:45:00 UTC 
openssl-1.1.0h-3.fc26 has been pushed to the Fedora 26 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-d63ce90642
Comment 6 Fedora Update System 2018-04-04 17:57:02 UTC 
openssl-1.1.0h-3.fc27 has been pushed to the Fedora 27 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-7ffd8dd0a0
Comment 7 Fedora Update System 2018-04-04 18:35:49 UTC 
openssl-1.1.0h-3.fc28 has been pushed to the Fedora 28 testing repository. If problems still persist, please make note of it in this bug report.
See https://fedoraproject.org/wiki/QA:Updates_Testing for
instructions on how to install test updates.
You can provide feedback for this update here: https://bodhi.fedoraproject.org/updates/FEDORA-2018-d8685f3c77
Comment 8 Fedora Update System 2018-04-05 11:48:56 UTC 
openssl-1.1.0h-3.fc28 has been pushed to the Fedora 28 stable repository. If problems still persist, please make note of it in this bug report.
Comment 9 Fedora Update System 2018-04-05 23:58:08 UTC 
openssl-1.1.0h-3.fc27 has been pushed to the Fedora 27 stable repository. If problems still persist, please make note of it in this bug report.
Comment 10 Fedora Update System 2018-04-09 18:34:11 UTC 
openssl-1.1.0h-3.fc26 has been pushed to the Fedora 26 stable repository. If problems still persist, please make note of it in this bug report.