SEGFAULT on RHEL9 when using metadata downloaded via HTTPS

[Luca 'remix_tj' Lorenzetto]

Hello,

as far as i can see:

# rpm -qf /usr/lib64/libcrypto.so.1.1
compat-openssl11-1.1.1k-4.el9_0.x86_64

But if i try to remove that package i get:

Removing:
 compat-openssl11                                     x86_64
                       1:1.1.1k-4.el9_0
  @rhel-9-appstream-rhui-rpms                                  3.7 M
Removing dependent packages:
 shibboleth                                           x86_64
                       3.4.1-1
  @shibboleth                                                  4.8 M

So i tried

dnf remove compat-openssl11
dnf install --exclude=compat-openssl* shibboleth

and i got the config working!

Maybe the spec file for shibboleth should include some more specific
dependency declaration? Like restricting the version of openssl to
something not lower that openssl 3?

Luca

On Tue, Mar 14, 2023 at 7:37 PM Cantor, Scott <cantor.2 at osu.edu> wrote:
>
> > Hello, can you try with this metadataprovider conf?
>
> No need, you already found the problem.
>
> libcrypto.so.3 => /lib64/libcrypto.so.3 (0x00007f1e3c6f2000)
> libcrypto.so.1.1 => /lib64/libcrypto.so.1.1 (0x00007f1e3c3ea000)
>
> > i see multiple libcrypto.so here...
>
> Yes, so you have a corrupt build that is not my package set. Trying to mix two different OpenSSL versions is going to crash.
>
> -- Scott
>
>


-- 
"E' assurdo impiegare gli uomini di intelligenza eccellente per fare
calcoli che potrebbero essere affidati a chiunque se si usassero delle
macchine"
Gottfried Wilhelm von Leibnitz, Filosofo e Matematico (1646-1716)

"Internet è la più grande biblioteca del mondo.
Ma il problema è che i libri sono tutti sparsi sul pavimento"
John Allen Paulos, Matematico (1945-vivente)

Luca 'remix_tj' Lorenzetto, http://www.remixtj.net , <lorenzetto.luca at gmail.com>