Bug 190329 - Upgrade from FC3 breaks ssl and gpg
Summary: Upgrade from FC3 breaks ssl and gpg
Keywords:
Status: CLOSED UPSTREAM
Alias: None
Product: Fedora
Classification: Fedora
Component: openssl
Version: 5
Hardware: i686
OS: Linux
medium
high
Target Milestone: ---
Assignee: Tomas Mraz
QA Contact: Brian Brock
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2006-05-01 09:52 UTC by Jørgen Thomsen
Modified: 2007-11-30 22:11 UTC (History)
1 user (show)

Fixed In Version:
Clone Of:
Environment:
Last Closed: 2006-05-09 06:54:39 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Jørgen Thomsen 2006-05-01 09:52:08 UTC
Description of problem:
After spending many hours of detecting the cause of gpg and ssl connections not 
working after the upgrade, I found these problems:

1) perl module Net::SSLeay (CPAN 1.30) cannot install with 'undefined symbol 
inflateEnd'. Reason: the zlib library '-lz' is not included in the library 
paths to search (this has been reported to the developers). Might be caused by 
using openssl 0.9.8a

2) non-root users cannot use ssl and gpg due to no read permission 
to /dev/urandom for anybody by root. Whether this is a problem with kernel
2.6.16-1.2096_FC5 or the one I had to fallback to (2.6.9) due to the missing 
serial ports, I do not know.
  

Version-Release number of selected component (if applicable):


How reproducible:
Constantly

Steps to Reproduce:
1.
2.
3.
  
Actual results:


Expected results:


Additional info:

Comment 1 Jørgen Thomsen 2006-05-01 22:03:26 UTC
re 2) 
After compiling a kernel with my missing serial ports added (unrelated to 
this), I noticed that after booting, the /dev/random and /dev/urandom did have 
read permission for everybody, so it might be a problem related to the older 
kernel I used unless the permissions somehow survive a boot.


Comment 2 Dave Jones 2006-05-07 00:22:15 UTC
you have three separate problems here. please file a separate bug for each next
time.

The kernel problem (the serial port issue) can be solved without revuilding the
kernel.  Boot with 8250.nr_uarts=4 (or however many you have).

The permissions issue was indeed due to the older kernel. (Remember FC3 had no
udev, so lots of the kernel side bits were also missing, so when udev started
up, it had no clue what was going on).

The perl/ssl issue I've no idea, reassigning.


Comment 3 Tomas Mraz 2006-05-09 06:54:39 UTC
The libcrypto and libssl link to libz correctly so I don't see where the problem
you reported above comes from.


Note You need to log in before you can comment on or make changes to this bug.