Updating OpenSSL 1.0.1i for Centmin Mod [discussion]

eva2000 · Aug 7, 2014

Discussion thread for OpenSSL 1.0.1i updating for Centmin Mod

Securiy fix details http://www.openssl.org/news/secadv_20140806.txt

OpenSSL Security Advisory [6 Aug 2014]
========================================

Information leak in pretty printing functions (CVE-2014-3508)
=============================================================

A flaw in OBJ_obj2txt may cause pretty printing functions such as
X509_name_oneline, X509_name_print_ex et al. to leak some information from the
stack. Applications may be affected if they echo pretty printing output to the
attacker. OpenSSL SSL/TLS clients and servers themselves are not affected.

OpenSSL 0.9.8 users should upgrade to 0.9.8zb
OpenSSL 1.0.0 users should upgrade to 1.0.0n.
OpenSSL 1.0.1 users should upgrade to 1.0.1i.

Thanks to Ivan Fratric (Google) for discovering this issue. This issue
was reported to OpenSSL on 19th June 2014.

The fix was developed by Emilia Käsper and Stephen Henson of the OpenSSL
development team.

Crash with SRP ciphersuite in Server Hello message (CVE-2014-5139)
==================================================================

The issue affects OpenSSL clients and allows a malicious server to crash
the client with a null pointer dereference (read) by specifying an SRP
ciphersuite even though it was not properly negotiated with the client. This can
be exploited through a Denial of Service attack.

OpenSSL 1.0.1 SSL/TLS client users should upgrade to 1.0.1i.

Thanks to Joonas Kuorilehto and Riku Hietamäki (Codenomicon) for discovering and
researching this issue. This issue was reported to OpenSSL on 2nd July 2014.

The fix was developed by Stephen Henson of the OpenSSL core team.

Race condition in ssl_parse_serverhello_tlsext (CVE-2014-3509)
==============================================================

If a multithreaded client connects to a malicious server using a resumed session
and the server sends an ec point format extension it could write up to 255 bytes
to freed memory.

OpenSSL 1.0.0 SSL/TLS client users should upgrade to 1.0.0n.
OpenSSL 1.0.1 SSL/TLS client users should upgrade to 1.0.1i.

Thanks to Gabor Tyukasz (LogMeIn Inc) for discovering and researching this
issue. This issue was reported to OpenSSL on 8th July 2014.

The fix was developed by Gabor Tyukasz.

Double Free when processing DTLS packets (CVE-2014-3505)
========================================================

An attacker can force an error condition which causes openssl to crash whilst
processing DTLS packets due to memory being freed twice. This can be exploited
through a Denial of Service attack.

OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.

Thanks to Adam Langley and Wan-Teh Chang (Google) for discovering and
researching this issue. This issue was reported to OpenSSL on 6th June
2014.

The fix was developed by Adam Langley.

DTLS memory exhaustion (CVE-2014-3506)
======================================

An attacker can force openssl to consume large amounts of memory whilst
processing DTLS handshake messages. This can be exploited through a Denial of
Service attack.

OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.

Thanks to Adam Langley (Google) for discovering and researching this
issue. This issue was reported to OpenSSL on 6th June 2014.

The fix was developed by Adam Langley.

DTLS memory leak from zero-length fragments (CVE-2014-3507)
===========================================================

By sending carefully crafted DTLS packets an attacker could cause openssl to
leak memory. This can be exploited through a Denial of Service attack.

OpenSSL 0.9.8 DTLS users should upgrade to 0.9.8zb
OpenSSL 1.0.0 DTLS users should upgrade to 1.0.0n.
OpenSSL 1.0.1 DTLS users should upgrade to 1.0.1i.

Thanks to Adam Langley (Google) for discovering and researching this
issue. This issue was reported to OpenSSL on 6th June 2014.

The fix was developed by Adam Langley.

OpenSSL DTLS anonymous EC(DH) denial of service (CVE-2014-3510)
===============================================================

OpenSSL DTLS clients enabling anonymous (EC)DH ciphersuites are subject to a
denial of service attack. A malicious server can crash the client with a null
pointer dereference (read) by specifying an anonymous (EC)DH ciphersuite and
sending carefully crafted handshake messages.

OpenSSL 0.9.8 DTLS client users should upgrade to 0.9.8zb
OpenSSL 1.0.0 DTLS client users should upgrade to 1.0.0n.
OpenSSL 1.0.1 DTLS client users should upgrade to 1.0.1i.

Thanks to Felix Gröbert (Google) for discovering and researching this issue.
This issue was reported to OpenSSL on 18th July 2014.

The fix was developed by Emilia Käsper of the OpenSSL development team.

OpenSSL TLS protocol downgrade attack (CVE-2014-3511)
=====================================================

A flaw in the OpenSSL SSL/TLS server code causes the server to negotiate
TLS 1.0 instead of higher protocol versions when the ClientHello message is
badly fragmented. This allows a man-in-the-middle attacker to force a
downgrade to TLS 1.0 even if both the server and the client support a higher
protocol version, by modifying the client's TLS records.

OpenSSL 1.0.1 SSL/TLS server users should upgrade to 1.0.1i.

Thanks to David Benjamin and Adam Langley (Google) for discovering and
researching this issue. This issue was reported to OpenSSL on 21st July 2014.

The fix was developed by David Benjamin.

SRP buffer overrun (CVE-2014-3512)
==================================

A malicious client or server can send invalid SRP parameters and overrun
an internal buffer. Only applications which are explicitly set up for SRP
use are affected.

OpenSSL 1.0.1 SSL/TLS users should upgrade to 1.0.1i.

Thanks to Sean Devlin and Watson Ladd (Cryptography Services, NCC
Group) for discovering this issue. This issue was reported to OpenSSL
on 31st July 2014.

The fix was developed by Stephen Henson of the OpenSSL core team.

References
==========
URL for this Security Advisory:
http://www.openssl.org/news/secadv_20140806.txt

Note: the online version of the advisory may be updated with additional
details over time.
Click to expand...

rdan · Aug 7, 2014

Thanks for the heads up

Code:

# nginx -V
nginx version: nginx/1.7.4
TLS SNI support enabled
configure arguments: --with-cc-opt='-I/svr-setup/staticlibssl/include -I/usr/include' --with-ld-opt='-L/svr-setup/staticlibssl/lib -Wl,-rpath -lssl -lcrypto -ldl -lz' --sbin-path=/usr/local/sbin/nginx --conf-path=/usr/local/nginx/conf/nginx.conf --with-http_ssl_module --with-http_gzip_static_module --with-http_stub_status_module --with-http_sub_module --with-http_addition_module --with-http_image_filter_module --with-http_secure_link_module --with-http_flv_module --with-http_realip_module --with-openssl-opt=enable-tlsext --add-module=../ngx-fancyindex-ngx-fancyindex --add-module=../ngx_cache_purge-2.1 --add-module=../headers-more-nginx-module-0.25 --add-module=../nginx-accesskey-2.0.3 --add-module=../nginx-http-concat-master --with-http_dav_module --add-module=../nginx-dav-ext-module-0.0.3 --with-openssl=../openssl-1.0.1i --with-libatomic --with-pcre=../pcre-8.35 --with-pcre-jit --with-http_spdy_module --add-module=../ngx_pagespeed-release-1.8.31.4-beta

rdan · Aug 7, 2014

Waiting for Floren to update his repo for the system

eva2000 · Aug 7, 2014

Yeah waiting game either way, Redhat, CentOS, Axivo etc - for YUM packages, they all will usually lag behind direct from the source tarball downloads

eva2000 · Aug 8, 2014

Might work on an OpenSSL version checker for Nginx upgrade routines, similar to PHP version checker I have been playing with at PHP - PHP 5.4.31 Released | Centmin Mod Community
Code:
/root/tools/checkopenssl.sh        
latest OpenSSL version openssl-1.0.1i.tar.gz already downloaded
Code:
/root/tools/checkopenssl.sh       
newer OpenSSL version exists. Downloading...
2014-08-08 01:24:13 URL:http://www.openssl.org/source/openssl-1.0.1i.tar.gz [4422117/4422117] -> "openssl-1.0.1i.tar.gz" [1]

eva2000 · Aug 8, 2014

RoldanLT said: ↑

Waiting for Floren to update his repo for the system
Click to expand...

@RoldanLT .. @Floren has updated his Axivo OpenSSL RPM to 1.0.1i as well if you're using that https://www.axivo.com/articles/openssl-1-0-1-update-released.22/

eva2000 · Aug 8, 2014

For folks on Centmin Mod 1.2.3-eva2000.07 and higher, Axivo's YUM Repo is installed by default for 64bit OS systems only and is disabled by default. You can try updating to Axivo's OpenSSL 1.0.1i version with this command

Code:

yum -y --enablerepo=axivo install openssl --disableplugin=priorities

To check if OpenSSL 1.0.1i was installed

Code:

yum -q list openssl --enablerepo=axivo --disableplugin=priorities          
Installed Packages
openssl.x86_64                                                              1:1.0.1i-1.el6                                                              @axivo

For example on test CentOS 6.5 64bit system

Code:

yum -y --enablerepo=axivo install openssl --disableplugin=priorities
Loaded plugins: downloadonly, fastestmirror
Determining fastest mirrors
epel/metalink                                                                                                                          | 3.5 kB     00:00    
 * base: centos.mirror.serversaustralia.com.au
 * epel: mirror.overthewire.com.au
 * extras: centos.mirror.crucial.com.au
 * rpmforge: mirror.web24.net.au
 * updates: centos.mirror.crucial.com.au
axivo                                                                                                                                  | 2.9 kB     00:00    
axivo/primary_db                                                                                                                       |  99 kB     00:01    
base                                                                                                                                   | 3.7 kB     00:00    
epel                                                                                                                                   | 4.4 kB     00:00    
epel/primary_db                                                                                                                        | 6.3 MB     00:01    
extras                                                                                                                                 | 3.4 kB     00:00    
mariadb                                                                                                                                | 1.9 kB     00:00    
mariadb/primary_db                                                                                                                     |  15 kB     00:00 rpmforge                                                                                                                               | 1.9 kB     00:00    
updates                                                                                                                                | 3.4 kB     00:00    
updates/primary_db                                                                                                                     | 4.7 MB     00:01    
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 0:1.0.1e-16.el6_5.14 will be updated
--> Processing Dependency: libcrypto.so.10()(64bit) for package: ntpdate-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: MariaDB-shared-5.5.38-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: libssh2-1.4.2-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 1:net-snmp-utils-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: libarchive-2.8.3-4.el6_2.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: ntp-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: fipscheck-1.2.0-7.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: MariaDB-server-5.5.38-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 1:net-snmp-libs-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: openssl-devel-1.0.1e-16.el6_5.14.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 1:net-snmp-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: cyrus-sasl-2.1.23-13.el6_3.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: wget-1.12-1.11.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: lynx-2.8.6-27.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: openssh-server-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 32:bind-libs-9.8.2-0.23.rc1.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: 32:bind-utils-9.8.2-0.23.rc1.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: perl-DBD-MySQL-4.013-3.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: git-1.7.1-3.el6_4.1.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: libc-client-2007e-11.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: MariaDB-client-5.5.38-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: python-libs-2.6.6-52.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: openssh-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10()(64bit) for package: openssh-clients-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: 1:net-snmp-libs-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: openssh-clients-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: ntp-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: openssh-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: ntpdate-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1)(64bit) for package: openssh-server-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10(OPENSSL_1.0.1_EC)(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: 1:net-snmp-libs-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: ntp-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: ntpdate-4.2.6p5-1.el6.centos.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: openssh-clients-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: wget-1.12-1.11.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: openssh-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: python-libs-2.6.6-52.el6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: openssh-server-5.3p1-94.el6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: 32:bind-libs-9.8.2-0.23.rc1.el6_5.1.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for package: 1:net-snmp-utils-5.5-49.el6_5.1.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: perl-DBD-MySQL-4.013-3.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: openssl-devel-1.0.1e-16.el6_5.14.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: wget-1.12-1.11.el6_5.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: git-1.7.1-3.el6_4.1.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: MariaDB-shared-5.5.38-1.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: libc-client-2007e-11.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: MariaDB-client-5.5.38-1.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: python-libs-2.6.6-52.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: lynx-2.8.6-27.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: libssh2-1.4.2-1.el6.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libssl.so.10()(64bit) for package: MariaDB-server-5.5.38-1.el6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package: python-libs-2.6.6-52.el6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package: 1:openssl-1.0.1i-1.el6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package: wget-1.12-1.11.el6_5.x86_64
--> Processing Dependency: openssl = 1.0.1e-16.el6_5.14 for package: openssl-devel-1.0.1e-16.el6_5.14.x86_64
---> Package openssl.x86_64 1:1.0.1i-1.el6 will be an update
--> Running transaction check
---> Package MariaDB-client.x86_64 0:5.5.38-1.el6 will be updated
---> Package MariaDB-client.x86_64 0:5.5.39-1.el6 will be an update
---> Package MariaDB-server.x86_64 0:5.5.38-1.el6 will be updated
---> Package MariaDB-server.x86_64 0:5.5.39-1.el6 will be an update
---> Package MariaDB-shared.x86_64 0:5.5.38-1.el6 will be updated
---> Package MariaDB-shared.x86_64 0:5.5.39-1.el6 will be an update
---> Package openssl.x86_64 0:1.0.1e-16.el6_5.14 will be obsoleted
---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5.14 will be updated
---> Package openssl-devel.x86_64 1:1.0.1i-1.el6 will be an update
---> Package openssl-libs.x86_64 1:1.0.1i-1.el6 will be obsoleting
---> Package postfix.x86_64 2:2.6.6-6.el6_5 will be updated
--> Processing Dependency: postfix = 2:2.6.6-6.el6_5 for package: 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64
---> Package postfix.x86_64 2:2.11.1-1.el6 will be an update
--> Processing Dependency: libpq.so.5()(64bit) for package: 2:postfix-2.11.1-1.el6.x86_64
--> Processing Dependency: libpcre.so.1()(64bit) for package: 2:postfix-2.11.1-1.el6.x86_64
--> Running transaction check
---> Package pcre.x86_64 0:7.8-6.el6 will be updated
--> Processing Dependency: libpcre.so.0()(64bit) for package: pcre-devel-7.8-6.el6.x86_64
--> Processing Dependency: libpcre.so.0()(64bit) for package: grep-2.6.3-4.el6_5.1.x86_64
--> Processing Dependency: libpcre.so.0()(64bit) for package: less-436-10.el6.x86_64
--> Processing Dependency: pcre = 7.8-6.el6 for package: pcre-devel-7.8-6.el6.x86_64
---> Package pcre.x86_64 0:8.35-1.el6 will be an update
---> Package postfix-perl-scripts.x86_64 2:2.6.6-6.el6_5 will be updated
---> Package postfix-perl-scripts.x86_64 2:2.11.1-1.el6 will be an update
---> Package postgresql-libs.x86_64 0:8.4.20-1.el6_5 will be installed
--> Running transaction check
---> Package libpcre.x86_64 0:8.21-1.el6 will be installed
---> Package pcre-devel.x86_64 0:7.8-6.el6 will be updated
---> Package pcre-devel.x86_64 0:8.35-1.el6 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================
 Package                                       Arch                            Version                                 Repository                        Size
==============================================================================================================================================================
Installing:
 openssl-libs                                  x86_64                          1:1.0.1i-1.el6                          axivo                            962 k
     replacing  openssl.x86_64 1.0.1e-16.el6_5.14
Updating:
 openssl                                       x86_64                          1:1.0.1i-1.el6                          axivo                            583 k
Installing for dependencies:
 libpcre                                       x86_64                          8.21-1.el6                              axivo                            443 k
 postgresql-libs                               x86_64                          8.4.20-1.el6_5                          updates                          201 k
Updating for dependencies:
 MariaDB-client                                x86_64                          5.5.39-1.el6                            mariadb                           10 M
 MariaDB-server                                x86_64                          5.5.39-1.el6                            mariadb                           43 M
 MariaDB-shared                                x86_64                          5.5.39-1.el6                            mariadb                          1.1 M
 openssl-devel                                 x86_64                          1:1.0.1i-1.el6                          axivo                            1.1 M
 pcre                                          x86_64                          8.35-1.el6                              axivo                            1.4 M
 pcre-devel                                    x86_64                          8.35-1.el6                              axivo                            218 k
 postfix                                       x86_64                          2:2.11.1-1.el6                          axivo                            5.7 M
 postfix-perl-scripts                          x86_64                          2:2.11.1-1.el6                          axivo                             46 k

Transaction Summary
==============================================================================================================================================================
Install       3 Package(s)
Upgrade       9 Package(s)

Total download size: 65 M
Downloading Packages:
(1/12): MariaDB-5.5.39-centos6-x86_64-client.rpm                                                                                       |  10 MB     00:24    
(2/12): MariaDB-5.5.39-centos6-x86_64-server.rpm                                                                                       |  43 MB     00:45    
(3/12): MariaDB-5.5.39-centos6-x86_64-shared.rpm                                                                                       | 1.1 MB     00:01    
(4/12): libpcre-8.21-1.el6.x86_64.rpm                                                                                                  | 443 kB     00:04    
(5/12): openssl-1.0.1i-1.el6.x86_64.rpm                                                                                                | 583 kB     00:04    
(6/12): openssl-devel-1.0.1i-1.el6.x86_64.rpm                                                                                          | 1.1 MB     00:05    
(7/12): openssl-libs-1.0.1i-1.el6.x86_64.rpm                                                                                           | 962 kB     00:06    
(8/12): pcre-8.35-1.el6.x86_64.rpm                                                                                                     | 1.4 MB     00:05    
(9/12): pcre-devel-8.35-1.el6.x86_64.rpm                                                                                               | 218 kB     00:02    
(10/12): postfix-2.11.1-1.el6.x86_64.rpm                                                                                               | 5.7 MB     00:12    
(11/12): postfix-perl-scripts-2.11.1-1.el6.x86_64.rpm                                                                                  |  46 kB     00:00    
(12/12): postgresql-libs-8.4.20-1.el6_5.x86_64.rpm                                                                                     | 201 kB     00:00    
--------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                         553 kB/s |  65 MB     01:59    
warning: rpmts_HdrFromFdno: Header V4 DSA/SHA1 Signature, key ID 64806737: NOKEY
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AXIVO
Importing GPG key 0x64806737:
 Userid : Axivo Inc. (axivo) <info@axivo.com>
 Package: axivo-release-6-1.noarch (installed)
 From   : /etc/pki/rpm-gpg/RPM-GPG-KEY-AXIVO
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : 1:openssl-libs-1.0.1i-1.el6.x86_64                                                                                                        1/21 
  Updating   : pcre-8.35-1.el6.x86_64                                                                                                                    2/21 
  Installing : postgresql-libs-8.4.20-1.el6_5.x86_64                                                                                                     3/21 
  Updating   : MariaDB-client-5.5.39-1.el6.x86_64                                                                                                        4/21 
  Updating   : MariaDB-shared-5.5.39-1.el6.x86_64                                                                                                        5/21 
  Updating   : 2:postfix-2.11.1-1.el6.x86_64                                                                                                             6/21 
warning: /etc/postfix/main.cf created as /etc/postfix/main.cf.rpmnew
  Updating   : 2:postfix-perl-scripts-2.11.1-1.el6.x86_64                                                                                                7/21 
  Updating   : MariaDB-server-5.5.39-1.el6.x86_64                                                                                                        8/21 
warning: /etc/init.d/mysql saved as /etc/init.d/mysql.rpmsave
  Updating   : pcre-devel-8.35-1.el6.x86_64                                                                                                              9/21 
  Updating   : 1:openssl-devel-1.0.1i-1.el6.x86_64                                                                                                      10/21 
  Updating   : 1:openssl-1.0.1i-1.el6.x86_64                                                                                                            11/21 
  Installing : libpcre-8.21-1.el6.x86_64                                                                                                                12/21 
  Cleanup    : 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64                                                                                              13/21 
  Cleanup    : pcre-devel-7.8-6.el6.x86_64                                                                                                              14/21 
  Cleanup    : openssl-devel-1.0.1e-16.el6_5.14.x86_64                                                                                                  15/21 
  Cleanup    : 2:postfix-2.6.6-6.el6_5.x86_64                                                                                                           16/21 
  Cleanup    : MariaDB-server-5.5.38-1.el6.x86_64                                                                                                       17/21 
  Cleanup    : MariaDB-client-5.5.38-1.el6.x86_64                                                                                                       18/21 
Shutting down MySQL. SUCCESS! 
Starting MySQL. SUCCESS! 
  Cleanup    : MariaDB-shared-5.5.38-1.el6.x86_64                                                                                                       19/21 
  Cleanup    : openssl-1.0.1e-16.el6_5.14.x86_64                                                                                                        20/21 
  Cleanup    : pcre-7.8-6.el6.x86_64                                                                                                                    21/21 
  Verifying  : 1:openssl-devel-1.0.1i-1.el6.x86_64                                                                                                       1/21 
  Verifying  : 1:openssl-libs-1.0.1i-1.el6.x86_64                                                                                                        2/21 
  Verifying  : postgresql-libs-8.4.20-1.el6_5.x86_64                                                                                                     3/21 
  Verifying  : MariaDB-server-5.5.39-1.el6.x86_64                                                                                                        4/21 
  Verifying  : 2:postfix-2.11.1-1.el6.x86_64                                                                                                             5/21 
  Verifying  : pcre-devel-8.35-1.el6.x86_64                                                                                                              6/21 
  Verifying  : libpcre-8.21-1.el6.x86_64                                                                                                                 7/21 
  Verifying  : pcre-8.35-1.el6.x86_64                                                                                                                    8/21 
  Verifying  : 1:openssl-1.0.1i-1.el6.x86_64                                                                                                             9/21 
  Verifying  : MariaDB-client-5.5.39-1.el6.x86_64                                                                                                       10/21 
  Verifying  : MariaDB-shared-5.5.39-1.el6.x86_64                                                                                                       11/21 
  Verifying  : 2:postfix-perl-scripts-2.11.1-1.el6.x86_64                                                                                               12/21 
  Verifying  : MariaDB-shared-5.5.38-1.el6.x86_64                                                                                                       13/21 
  Verifying  : 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64                                                                                              14/21 
  Verifying  : MariaDB-server-5.5.38-1.el6.x86_64                                                                                                       15/21 
  Verifying  : pcre-devel-7.8-6.el6.x86_64                                                                                                              16/21 
  Verifying  : openssl-devel-1.0.1e-16.el6_5.14.x86_64                                                                                                  17/21 
  Verifying  : 2:postfix-2.6.6-6.el6_5.x86_64                                                                                                           18/21 
  Verifying  : openssl-1.0.1e-16.el6_5.14.x86_64                                                                                                        19/21 
  Verifying  : openssl-1.0.1e-16.el6_5.14.x86_64                                                                                                        20/21 
  Verifying  : pcre-7.8-6.el6.x86_64                                                                                                                    21/21 
  Verifying  : MariaDB-client-5.5.38-1.el6.x86_64                                                                                                       22/21 

Installed:
  openssl-libs.x86_64 1:1.0.1i-1.el6                                                                                                                          

Dependency Installed:
  libpcre.x86_64 0:8.21-1.el6                                             postgresql-libs.x86_64 0:8.4.20-1.el6_5                                            

Updated:
  openssl.x86_64 1:1.0.1i-1.el6                                                                                                                              

Dependency Updated:
  MariaDB-client.x86_64 0:5.5.39-1.el6 MariaDB-server.x86_64 0:5.5.39-1.el6 MariaDB-shared.x86_64 0:5.5.39-1.el6 openssl-devel.x86_64 1:1.0.1i-1.el6      
  pcre.x86_64 0:8.35-1.el6             pcre-devel.x86_64 0:8.35-1.el6       postfix.x86_64 2:2.11.1-1.el6        postfix-perl-scripts.x86_64 2:2.11.1-1.el6

Replaced:
  openssl.x86_64 0:1.0.1e-16.el6_5.14                                                                                                                        

Complete!

If not using Axivo YUM repo or on 32bit OS systems, you'd need to wait for Redhat/CentOS provided OpenSSL 1.0.1e update which will have same naming convention 1.0.1e just with an incremented number on the end and then do

Code:

yum list openssl
yum -y update openssl

Floren · Aug 8, 2014

yum --enablerepo=axivo update openssl --disableplugin=priorities
Click to expand...

@eva2000, just curious, why the postgresql-libs install? Is it something needed by your build?
I know AXIVO postfix 2.11 use it, did you encountered any weird deps?

eva2000 · Aug 8, 2014

default CentOS uses postfix 2.6.6 so I guess postgresql-libs isn't installed out of the box ?

see the dependency list

Code:

===========================================================================
Installing:
openssl-libs                                  x86_64                          1:1.0.1i-1.el6                          axivo                            962 k
     replacing  openssl.x86_64 1.0.1e-16.el6_5.14
Updating:
openssl                                       x86_64                          1:1.0.1i-1.el6                          axivo                            583 k
Installing for dependencies:
libpcre                                       x86_64                          8.21-1.el6                              axivo                            443 k
Updating for dependencies:
MariaDB-client                                x86_64                          5.5.39-1.el6                            mariadb                           10 M
MariaDB-server                                x86_64                          5.5.39-1.el6                            mariadb                           43 M
MariaDB-shared                                x86_64                          5.5.39-1.el6                            mariadb                          1.1 M
openssl-devel                                 x86_64                          1:1.0.1i-1.el6                          axivo                            1.1 M
pcre                                          x86_64                          8.35-1.el6                              axivo                            1.4 M
pcre-devel                                    x86_64                          8.35-1.el6                              axivo                            218 k
postfix                                       x86_64                          2:2.11.1-1.el6                          axivo                            5.7 M
postfix-perl-scripts                          x86_64                          2:2.11.1-1.el6                          axivo                             46 k

Transaction Summary
==============================================================================================================================================================

Floren · Aug 8, 2014

@eva2000, it should add automatically the postgresql-libs as dependency. At least it does it for me?
Also, I don't like to add the -y switch because I want to see what packages are installed before I proceed. Sure you can revert it easy with yum history... but still.

eva2000 · Aug 8, 2014

Floren said: ↑

@eva2000, it should add automatically the postgresql-libs as dependency. At least it does it for me?
Also, I don't like to add the -y switch because I want to see what packages are installed before I proceed. Sure you can revert it easy with yum history... but still.
Click to expand...

let me try again, reverting the server snapshot

Floren · Aug 8, 2014

Use update, instead of install. You already have OpenSSL installed right?

yum --disableplugin=priorities --enablerepo=axivo update openssl
Click to expand...

eva2000 · Aug 8, 2014

i tried update it couldn't find openssl and openssl version -a command not found heh

as yes even with update postgresql-lib is installed.. updating guide above

Code:

==============================================================================================================================================================
Package                                       Arch                            Version                                 Repository                        Size
==============================================================================================================================================================
Installing:
openssl-libs                                  x86_64                          1:1.0.1i-1.el6                          axivo                            962 k
     replacing  openssl.x86_64 1.0.1e-16.el6_5.14
Updating:
openssl                                       x86_64                          1:1.0.1i-1.el6                          axivo                            583 k
Installing for dependencies:
libpcre                                       x86_64                          8.21-1.el6                              axivo                            443 k
postgresql-libs                               x86_64                          8.4.20-1.el6_5                          updates                          201 k
Updating for dependencies:
MariaDB-client                                x86_64                          5.5.39-1.el6                            mariadb                           10 M
MariaDB-server                                x86_64                          5.5.39-1.el6                            mariadb                           43 M
MariaDB-shared                                x86_64                          5.5.39-1.el6                            mariadb                          1.1 M
openssl-devel                                 x86_64                          1:1.0.1i-1.el6                          axivo                            1.1 M
pcre                                          x86_64                          8.35-1.el6                              axivo                            1.4 M
pcre-devel                                    x86_64                          8.35-1.el6                              axivo                            218 k
postfix                                       x86_64                          2:2.11.1-1.el6                          axivo                            5.7 M
postfix-perl-scripts                          x86_64                          2:2.11.1-1.el6                          axivo                             46 k

Transaction Summary
==============================================================================================================================================================
Install       3 Package(s)
Upgrade       9 Package(s)

Floren · Aug 8, 2014

@eva2000, now you have PCRE 8.35 in your system, zillions of bugs addressed and many performance enhancements. AXIVO is the ONLY repo providing this version for RHEL6, as system upgrade.
https://www.axivo.com/articles/php-5-5-update-released.13/update?update=22

Edit: I see you updated the guide but left install in place, instead of update.

eva2000 · Aug 8, 2014

Floren said: ↑

@eva2000, now you have PCRE 8.35 in your system, zillions of bugs addressed and many performance enhancements. AXIVO is the ONLY repo providing this version for RHEL6, as system upgrade.
https://www.axivo.com/articles/php-5-5-update-released.13/update?update=22

Edit: I see you updated the guide but left install in place, instead of update. Running install on a system with OpenSSL already installed should not upgrade your package.
Click to expand...

try for third time then first time tried with update and it didn't install

eva2000 · Aug 8, 2014

yum using update instead of install, doesn't install Axivo OpenSSL 1.0.1i it shows as installed but command is missing. If I use install instead of update it works.

using update shows as installed but it isn't

Code:

 yum -y --enablerepo=axivo update openssl --disableplugin=priorities     
Loaded plugins: downloadonly, fastestmirror
Determining fastest mirrors
epel/metalink                                                                                                                          | 3.0 kB     00:00   
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
axivo                                                                                                                                  | 2.9 kB     00:00   
axivo/primary_db                                                                                                                       |  99 kB     00:01   
base                                                                                                                                   | 3.7 kB     00:00   
epel                                                                                                                                   | 4.4 kB     00:00   
epel/primary_db                                                                                                                        | 6.3 MB     00:03   
extras                                                                                                                                 | 3.4 kB     00:00   
mariadb                                                                                                                                | 1.9 kB     00:00   
mariadb/primary_db                                                                                                                     |  15 kB     00:00   
rpmforge                                                                                                                               | 1.9 kB     00:00   
updates                                                                                                                                | 3.4 kB     00:00   
updates/primary_db                                                                                                                     | 4.7 MB     00:02   
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 0:1.0.1e-16.el6_5.14 will be obsoleted
--> Processing Dependency: openssl for package: 2:postfix-2.6.6-6.el6_5.x86_64
--> Processing Dependency: openssl = 1.0.1e-16.el6_5.14 for package: openssl-devel-1.0.1e-16.el6_5.14.x86_64
---> Package openssl-libs.x86_64 1:1.0.1i-1.el6 will be obsoleting
--> Running transaction check
---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5.14 will be updated
---> Package openssl-devel.x86_64 1:1.0.1i-1.el6 will be an update
---> Package postfix.x86_64 2:2.6.6-6.el6_5 will be updated
--> Processing Dependency: postfix = 2:2.6.6-6.el6_5 for package: 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64
---> Package postfix.x86_64 2:2.11.1-1.el6 will be an update
--> Processing Dependency: libpq.so.5()(64bit) for package: 2:postfix-2.11.1-1.el6.x86_64
--> Processing Dependency: libpcre.so.1()(64bit) for package: 2:postfix-2.11.1-1.el6.x86_64
--> Running transaction check
---> Package pcre.x86_64 0:7.8-6.el6 will be updated
--> Processing Dependency: libpcre.so.0()(64bit) for package: pcre-devel-7.8-6.el6.x86_64
--> Processing Dependency: libpcre.so.0()(64bit) for package: grep-2.6.3-4.el6_5.1.x86_64
--> Processing Dependency: libpcre.so.0()(64bit) for package: less-436-10.el6.x86_64
--> Processing Dependency: pcre = 7.8-6.el6 for package: pcre-devel-7.8-6.el6.x86_64
---> Package pcre.x86_64 0:8.35-1.el6 will be an update
---> Package postfix-perl-scripts.x86_64 2:2.6.6-6.el6_5 will be updated
---> Package postfix-perl-scripts.x86_64 2:2.11.1-1.el6 will be an update
---> Package postgresql-libs.x86_64 0:8.4.20-1.el6_5 will be installed
--> Running transaction check
---> Package libpcre.x86_64 0:8.21-1.el6 will be installed
---> Package pcre-devel.x86_64 0:7.8-6.el6 will be updated
---> Package pcre-devel.x86_64 0:8.35-1.el6 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================
Package                                       Arch                            Version                                 Repository                        Size
==============================================================================================================================================================
Installing:
openssl-libs                                  x86_64                          1:1.0.1i-1.el6                          axivo                            962 k
     replacing  openssl.x86_64 1.0.1e-16.el6_5.14
Installing for dependencies:
libpcre                                       x86_64                          8.21-1.el6                              axivo                            443 k
postgresql-libs                               x86_64                          8.4.20-1.el6_5                          updates                          201 k
Updating for dependencies:
openssl-devel                                 x86_64                          1:1.0.1i-1.el6                          axivo                            1.1 M
pcre                                          x86_64                          8.35-1.el6                              axivo                            1.4 M
pcre-devel                                    x86_64                          8.35-1.el6                              axivo                            218 k
postfix                                       x86_64                          2:2.11.1-1.el6                          axivo                            5.7 M
postfix-perl-scripts                          x86_64                          2:2.11.1-1.el6                          axivo                             46 k

Transaction Summary
==============================================================================================================================================================
Install       3 Package(s)
Upgrade       5 Package(s)

Total download size: 10 M
Downloading Packages:
(1/8): libpcre-8.21-1.el6.x86_64.rpm                                                                                                   | 443 kB     00:03   
(2/8): openssl-devel-1.0.1i-1.el6.x86_64.rpm                                                                                           | 1.1 MB     00:05   
(3/8): openssl-libs-1.0.1i-1.el6.x86_64.rpm                                                                                            | 962 kB     00:06   
(4/8): pcre-8.35-1.el6.x86_64.rpm                                                                                                      | 1.4 MB     00:06   
(5/8): pcre-devel-8.35-1.el6.x86_64.rpm                                                                                                | 218 kB     00:02   
(6/8): postfix-2.11.1-1.el6.x86_64.rpm                                                                                                 | 5.7 MB     00:10   
(7/8): postfix-perl-scripts-2.11.1-1.el6.x86_64.rpm                                                                                    |  46 kB     00:00   
(8/8): postgresql-libs-8.4.20-1.el6_5.x86_64.rpm                                                                                       | 201 kB     00:00   
--------------------------------------------------------------------------------------------------------------------------------------------------------------
Total                                                                                                                         253 kB/s |  10 MB     00:40   
warning: rpmts_HdrFromFdno: Header V4 DSA/SHA1 Signature, key ID 64806737: NOKEY
Retrieving key from file:///etc/pki/rpm-gpg/RPM-GPG-KEY-AXIVO
Importing GPG key 0x64806737:
Userid : Axivo Inc. (axivo) <info@axivo.com>
Package: axivo-release-6-1.noarch (installed)
From   : /etc/pki/rpm-gpg/RPM-GPG-KEY-AXIVO
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Installing : 1:openssl-libs-1.0.1i-1.el6.x86_64                                                                                                        1/14
  Updating   : pcre-8.35-1.el6.x86_64                                                                                                                    2/14
  Installing : postgresql-libs-8.4.20-1.el6_5.x86_64                                                                                                     3/14
  Updating   : 2:postfix-2.11.1-1.el6.x86_64                                                                                                             4/14
warning: /etc/postfix/main.cf created as /etc/postfix/main.cf.rpmnew
  Updating   : 2:postfix-perl-scripts-2.11.1-1.el6.x86_64                                                                                                5/14
  Updating   : pcre-devel-8.35-1.el6.x86_64                                                                                                              6/14
  Updating   : 1:openssl-devel-1.0.1i-1.el6.x86_64                                                                                                       7/14
  Installing : libpcre-8.21-1.el6.x86_64                                                                                                                 8/14
  Cleanup    : 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64                                                                                               9/14
  Cleanup    : pcre-devel-7.8-6.el6.x86_64                                                                                                              10/14
  Cleanup    : openssl-devel-1.0.1e-16.el6_5.14.x86_64                                                                                                  11/14
  Cleanup    : 2:postfix-2.6.6-6.el6_5.x86_64                                                                                                           12/14
  Erasing    : openssl-1.0.1e-16.el6_5.14.x86_64                                                                                                        13/14
  Cleanup    : pcre-7.8-6.el6.x86_64                                                                                                                    14/14
  Verifying  : 1:openssl-devel-1.0.1i-1.el6.x86_64                                                                                                       1/14
  Verifying  : 1:openssl-libs-1.0.1i-1.el6.x86_64                                                                                                        2/14
  Verifying  : postgresql-libs-8.4.20-1.el6_5.x86_64                                                                                                     3/14
  Verifying  : 2:postfix-2.11.1-1.el6.x86_64                                                                                                             4/14
  Verifying  : libpcre-8.21-1.el6.x86_64                                                                                                                 5/14
  Verifying  : pcre-8.35-1.el6.x86_64                                                                                                                    6/14
  Verifying  : pcre-devel-8.35-1.el6.x86_64                                                                                                              7/14
  Verifying  : 2:postfix-perl-scripts-2.11.1-1.el6.x86_64                                                                                                8/14
  Verifying  : 2:postfix-perl-scripts-2.6.6-6.el6_5.x86_64                                                                                               9/14
  Verifying  : pcre-devel-7.8-6.el6.x86_64                                                                                                              10/14
  Verifying  : 2:postfix-2.6.6-6.el6_5.x86_64                                                                                                           11/14
  Verifying  : openssl-1.0.1e-16.el6_5.14.x86_64                                                                                                        12/14
  Verifying  : pcre-7.8-6.el6.x86_64                                                                                                                    13/14
  Verifying  : openssl-devel-1.0.1e-16.el6_5.14.x86_64                                                                                                  14/14

Installed:
  openssl-libs.x86_64 1:1.0.1i-1.el6                                                                                                                        

Dependency Installed:
  libpcre.x86_64 0:8.21-1.el6                                             postgresql-libs.x86_64 0:8.4.20-1.el6_5                                          

Dependency Updated:
  openssl-devel.x86_64 1:1.0.1i-1.el6               pcre.x86_64 0:8.35-1.el6        pcre-devel.x86_64 0:8.35-1.el6        postfix.x86_64 2:2.11.1-1.el6     
  postfix-perl-scripts.x86_64 2:2.11.1-1.el6     

Replaced:
  openssl.x86_64 0:1.0.1e-16.el6_5.14                                                                                                                       

Complete!

shows as installed but let's check nope not installed

Code:

yum -q list openssl --enablerepo=axivo --disableplugin=priorities
Available Packages
openssl.x86_64                                                              1:1.0.1i-1.el6                                                               axivo

openssl version -a
-bash: openssl: command not found

rpm -qa | grep openssl
openssl-libs-1.0.1i-1.el6.x86_64
openssl-devel-1.0.1i-1.el6.x86_64

Floren · Aug 8, 2014

@eva2000, IMO the proper way is to use update, not install.
As I mentioned in this update, disablepriorities might be culprit. I know that technically you can use install, but is just against logic.

Code:

       install
              Is  used  to  install  the  latest version of a package or group of packages while
              ensuring that all dependencies are satisfied.  (See Specifying package  names  for
              more  information)  If  no  package  matches  the  given package name(s), they are
              assumed to be a shell glob and any matches are then installed. If the name  starts
              with  an @ character the rest of the name is used as though passed to the groupin-
              stall command. If the name starts with a - character, then a search is done within
              the  transaction  and any matches are removed. If the name is a file, then install
              works like localinstall. If the name doesn\u2019t match a package, then  package  "pro-
              vides"  are  searched  (e.g.  "_sqlitecache.so()(64bit)")  as  are  filelists (Eg.
              "/usr/bin/yum"). Also note that for filelists, wildcards will match multiple pack-
              ages.

       update If run without any packages, update will update every currently installed package.
              If one or more packages or package globs are specified, Yum will only  update  the
              listed  packages.   While updating packages, yum will ensure that all dependencies
              are satisfied. (See Specifying package names for more information) If the packages
              or globs specified match to packages which are not currently installed then update
              will not install them. update operates on groups, files,  provides  and  filelists
              just like the "install" command.

              If  the  main obsoletes configure option is true (default) or the --obsoletes flag
              is present yum will include package obsoletes in its calculations - this makes  it
              better  for  distro-version  changes, for example: upgrading from somelinux 8.0 to
              somelinux 9.

              Note that "update" works on installed packages first, and only  if  there  are  no
              matches  does  it  look  for available packages. The difference is most noticeable
              when you do "update foo-1-2" which will act exactly as "update foo" if foo-1-2  is
              installed.  You can use the "update-to" if you\u2019d prefer that nothing happen in the
              above case.

Why you broke the rich CODE tag? Fix it now!

eva2000 · Aug 8, 2014

Well I don't have any problems with other 3rd party YUM repo packages with update command i.e. for redis, varnish, etc. But as I said for my target audience for Centmin Mod where several 3rd party YUM repos including Axivo are installed, priorities is in place to protect the base/core packages as my target audience with their average level of system admin knowledge, are more likely to screw up their system with a non-priorities protected yum update, then with the priorities system in place

.

rich code tag seems to be missing from Digitalpoint's syntax highlighter addon heh

with yum priorities removed and disabled still update doesn't work

Code:

yum -y --enablerepo=axivo --disableplugin=priorities list openssl
Loaded plugins: downloadonly, fastestmirror
No plugin match for: priorities
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Available Packages
openssl.x86_64                                                              1:1.0.1i-1.el6                                                               axivo

Code:

yum -y --enablerepo=axivo --disableplugin=priorities update openssl
Loaded plugins: downloadonly, fastestmirror
No plugin match for: priorities
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Setting up Update Process
Package(s) openssl available, but not installed.
No Packages marked for Update

Code:

yum -y --enablerepo=axivo update openssl                        
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Setting up Update Process
Package(s) openssl available, but not installed.
No Packages marked for Update

let's try other updates and see

yum priorities disabled/removed see re2c from rpmforge

Code:

yum list updates -q
Updated Packages
MariaDB-client.x86_64                                                      5.5.39-1.el6                                                               mariadb
MariaDB-common.x86_64                                                      5.5.39-1.el6                                                               mariadb
MariaDB-compat.x86_64                                                      5.5.39-1.el6                                                               mariadb
MariaDB-devel.x86_64                                                       5.5.39-1.el6                                                               mariadb
MariaDB-server.x86_64                                                      5.5.39-1.el6                                                               mariadb
MariaDB-shared.x86_64                                                      5.5.39-1.el6                                                               mariadb
ca-certificates.noarch                                                     2014.1.98-65.0.el6_5                                                       updates
cups-libs.x86_64                                                           1:1.4.2-52.el6_5.2                                                         updates
e2fsprogs.x86_64                                                           1.41.12-18.el6_5.1                                                         updates
e2fsprogs-devel.x86_64                                                     1.41.12-18.el6_5.1                                                         updates
e2fsprogs-libs.x86_64                                                      1.41.12-18.el6_5.1                                                         updates
grub.x86_64                                                                1:0.97-84.el6_5                                                            updates
initscripts.x86_64                                                         9.03.40-2.el6.centos.3                                                     updates
kernel.x86_64                                                              2.6.32-431.23.3.el6                                                        updates
kernel-devel.x86_64                                                        2.6.32-431.23.3.el6                                                        updates
kernel-firmware.noarch                                                     2.6.32-431.23.3.el6                                                        updates
kernel-headers.x86_64                                                      2.6.32-431.23.3.el6                                                        updates
libcom_err.x86_64                                                          1.41.12-18.el6_5.1                                                         updates
libcom_err-devel.x86_64                                                    1.41.12-18.el6_5.1                                                         updates
libss.x86_64                                                               1.41.12-18.el6_5.1                                                         updates
nspr.x86_64                                                                4.10.6-1.el6_5                                                             updates
nss.x86_64                                                                 3.16.1-4.el6_5                                                             updates
nss-sysinit.x86_64                                                         3.16.1-4.el6_5                                                             updates
nss-tools.x86_64                                                           3.16.1-4.el6_5                                                             updates
nss-util.x86_64                                                            3.16.1-1.el6_5                                                             updates
re2c.x86_64                                                                0.13.5-1.el6.rf                                                            rpmforge

yum priorities installed see priorities protection doesn't list re2c

Code:

1566 packages excluded due to repository priority protections

Code:

yum list updates
Loaded plugins: downloadonly, fastestmirror, priorities
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
1566 packages excluded due to repository priority protections
Updated Packages
MariaDB-client.x86_64                                                       5.5.39-1.el6                                                               mariadb
MariaDB-common.x86_64                                                       5.5.39-1.el6                                                               mariadb
MariaDB-compat.x86_64                                                       5.5.39-1.el6                                                               mariadb
MariaDB-devel.x86_64                                                        5.5.39-1.el6                                                               mariadb
MariaDB-server.x86_64                                                       5.5.39-1.el6                                                               mariadb
MariaDB-shared.x86_64                                                       5.5.39-1.el6                                                               mariadb
ca-certificates.noarch                                                      2014.1.98-65.0.el6_5                                                       updates
cups-libs.x86_64                                                            1:1.4.2-52.el6_5.2                                                         updates
e2fsprogs.x86_64                                                            1.41.12-18.el6_5.1                                                         updates
e2fsprogs-devel.x86_64                                                      1.41.12-18.el6_5.1                                                         updates
e2fsprogs-libs.x86_64                                                       1.41.12-18.el6_5.1                                                         updates
grub.x86_64                                                                 1:0.97-84.el6_5                                                            updates
initscripts.x86_64                                                          9.03.40-2.el6.centos.3                                                     updates
kernel.x86_64                                                               2.6.32-431.23.3.el6                                                        updates
kernel-devel.x86_64                                                         2.6.32-431.23.3.el6                                                        updates
kernel-firmware.noarch                                                      2.6.32-431.23.3.el6                                                        updates
kernel-headers.x86_64                                                       2.6.32-431.23.3.el6                                                        updates
libcom_err.x86_64                                                           1.41.12-18.el6_5.1                                                         updates
libcom_err-devel.x86_64                                                     1.41.12-18.el6_5.1                                                         updates
libss.x86_64                                                                1.41.12-18.el6_5.1                                                         updates
nspr.x86_64                                                                 4.10.6-1.el6_5                                                             updates
nss.x86_64                                                                  3.16.1-4.el6_5                                                             updates
nss-sysinit.x86_64                                                          3.16.1-4.el6_5                                                             updates
nss-tools.x86_64                                                            3.16.1-4.el6_5                                                             updates
nss-util.x86_64                                                             3.16.1-1.el6_5                                                             updates

now try yum priorities enabled and passing --disableplugin=priorities on cmd line and updating re2c, works fine here

Code:

yum -y --disableplugin=priorities update re2c
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package re2c.x86_64 0:0.13.5-1.el6 will be updated
---> Package re2c.x86_64 0:0.13.5-1.el6.rf will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================
Package                          Arch                               Version                                       Repository                            Size
==============================================================================================================================================================
Updating:
re2c                             x86_64                             0.13.5-1.el6.rf                               rpmforge                             210 k

Transaction Summary
==============================================================================================================================================================
Upgrade       1 Package(s)

Total download size: 210 k
Downloading Packages:
re2c-0.13.5-1.el6.rf.x86_64.rpm                                                                                                        | 210 kB     00:00  
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Updating   : re2c-0.13.5-1.el6.rf.x86_64                                                                                                                1/2
  Cleanup    : re2c-0.13.5-1.el6.x86_64                                                                                                                   2/2
  Verifying  : re2c-0.13.5-1.el6.rf.x86_64                                                                                                                1/2
  Verifying  : re2c-0.13.5-1.el6.x86_64                                                                                                                   2/2

Updated:
  re2c.x86_64 0:0.13.5-1.el6.rf                                                                                                                            

Complete!

double check and update fine for re2c package

Code:

yum -y --disableplugin=priorities list re2c
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Installed Packages
re2c.x86_64                                                             0.13.5-1.el6.rf                                                              @rpmforge

now try with re2c available in Axivo repo and yum priorities + update

and yes that installs fine, so the problem is only with Axivo OpenSSL update command

Code:

 yum -y --enablerepo=axivo --disableplugin=priorities list re2c
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Installed Packages
re2c.x86_64                                                             0.13.5-1.el6.rf                                                              @rpmforge
Available Packages
re2c.x86_64                                                             0.13.6-1.el6                                                                 axivo

update works

Code:

yum -y --enablerepo=axivo --disableplugin=priorities update re2c
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Setting up Update Process
Resolving Dependencies
--> Running transaction check
---> Package re2c.x86_64 0:0.13.5-1.el6.rf will be updated
---> Package re2c.x86_64 0:0.13.6-1.el6 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

==============================================================================================================================================================
Package                            Arch                                 Version                                    Repository                           Size
==============================================================================================================================================================
Updating:
re2c                               x86_64                               0.13.6-1.el6                               axivo                               127 k

Transaction Summary
==============================================================================================================================================================
Upgrade       1 Package(s)

Total download size: 127 k
Downloading Packages:
re2c-0.13.6-1.el6.x86_64.rpm                                                                                                           | 127 kB     00:01   
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
  Updating   : re2c-0.13.6-1.el6.x86_64                                                                                                                   1/2
  Cleanup    : re2c-0.13.5-1.el6.rf.x86_64                                                                                                                2/2
  Verifying  : re2c-0.13.6-1.el6.x86_64                                                                                                                   1/2
  Verifying  : re2c-0.13.5-1.el6.rf.x86_64                                                                                                                2/2

Updated:
  re2c.x86_64 0:0.13.6-1.el6                                                                                                                                

Complete!

Double check and Axivo update command works for re2c

Code:

yum -y --enablerepo=axivo --disableplugin=priorities list re2c
Loaded plugins: downloadonly, fastestmirror
Loading mirror speeds from cached hostfile
* base: mirror.ventraip.net.au
* epel: mirror.web24.net.au
* extras: mirror.ventraip.net.au
* rpmforge: mirror.ventraip.net.au
* updates: mirror.ventraip.net.au
Installed Packages
re2c.x86_64                                                                0.13.6-1.el6                                                                 @axivo

Floren · Aug 9, 2014

eva2000 said: ↑

Yeah waiting game either way, Redhat, CentOS, Axivo etc - for YUM packages, they all will usually lag behind direct from the source tarball downloads
Click to expand...

Sorry, I do enjoy the company of a beautiful woman occasionally... instead of working on updating a zillion patches for OpenSSL.

eva2000 · Aug 9, 2014

Floren said: ↑

Sorry, I do enjoy the company of a beautiful woman occasionally... instead of working on updating a zillion patches for OpenSSL.
Click to expand...

Probably why I am not compiling my own RPMs and maintaining my own YUM repo heh

Now imagine if next OpenSSL update has 50 patches

Log in / Register

Forums

Join the community today

Updating OpenSSL 1.0.1i for Centmin Mod [discussion]

eva2000 Administrator Staff Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

.

Log in / Register

Useful Searches

Join the community today

Updating OpenSSL 1.0.1i for Centmin Mod [discussion]

eva2000 Administrator Staff Member

rdan Well-Known Member

rdan Well-Known Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

Floren Active Member

eva2000 Administrator Staff Member

.