Install failed, SecureShell_A.05.20.015_HP-UX_B.11.31_IA_PA: Unsatisfied code symbol [...]

[Steven Schweda]

Trying to install the latest SSH kit on an
11.31 IA-64 system (or two). Installation
fails, so:

[...]
* Source:
dyi.antinode.info:/usr/patch/ssh/SecureShell_A.05.20.015_HP-UX_B.11.31_
IA_PA.depot
[...]
* Beginning the Configure Execution Phase.
/usr/lib/hpux64/dld.so: Unsatisfied code symbol 'EVP_CIPHER_CTX_key_length' in l
oad module '/opt/ssh/sbin/sshd'.
/var/tmp/BAA004694/catalog/Secure_Shell/SECSH-CMN/configure[123]: 4844 Killed
ERROR: could not start sshd
ERROR: The "configure" script for "Secure_Shell.SECSH-CMN" failed
(exit code "1"). The script location was
"/var/tmp/BAA004694/catalog/Secure_Shell/SECSH-CMN/configure".
* This script had errors and the execution of this fileset
cannot proceed until the problem is fixed. Check the above
output from the script for further details.
/usr/lib/hpux64/dld.so: Unsatisfied code symbol 'EVP_CIPHER_CTX_key_length' in l
oad module '/opt/ssh/sbin/sshd'.
/var/tmp/BAA004694/catalog/Secure_Shell/SECURE_SHELL/configure[121]: 4862 Killed
ERROR: could not start sshd
ERROR: The "configure" script for "Secure_Shell.SECURE_SHELL" failed
(exit code "1"). The script location was
"/var/tmp/BAA004694/catalog/Secure_Shell/SECURE_SHELL/configure".

* This script had errors and the execution of this fileset
cannot proceed until the problem is fixed. Check the above
output from the script for further details.
[...]


Clever ideas, work-arounds, revised product
kits, unspecified prerequisites, ...?

dyi # uname -a
HP-UX dyi B.11.31 U ia64 4235313755 unlimited-user license

[Robert-Jan Goossens_1 · Accepted solution]

Hi Steven,

http://www11.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01743625-2

--
Starting with HP-UX Secure Shell A.05.10 and HP-UX 11.31, OpenSSL is a shared library and is not archived. Secure Shell on HP-UX 11.31 now depends on the System's OpenSSL Version installed, not the one it was linked with.
--

If I look at "new in this release" info

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA

OpenSSH 5.2 is now linked with OpenSSL A.00.09.8k instead of A.00.09.7m

What version of OpenSSL are you running?

# ssh -V

Regards,
Robert-Jan

[Steven Schweda]

> What version of OpenSSL are you running?

Whatever came with the OS installation kit?

> # ssh -V

dyi # ssh -V
OpenSSH_5.2p1+sftpfilecontrol-v1.3-hpn13v5, OpenSSL 0.9.8d 28 Sep 2006
HP-UX Secure Shell-A.05.20.015, HP-UX Secure Shell version

Yup:

dyi # openssl version
OpenSSL 0.9.8d 28 Sep 2006

Time for a new OpenSSL? (0.9.8d does look a
bit tired.) I see that there's a fresh kit
near the SSH kit. I'll try to see what that
does for me, and report back. (Downloading
"File size: 464.57 MB" will take a while.)

> If I look at "new in this release" info
> [...]

All I see is:

Note: We are sorry but the document you
requested requires additional authorization
such as a certain level of support agreement.

(Which level I lack. But I'll assume that it
was educational.)

[Fabio Ettore]

Hi Steven,

I think the way provided by Robert about Openssl troubles is right (hello Rob!!).

Check for the following ITRC thread:

http://forums13.itrc.hp.com/service/forums/questionanswer.do?admit=109447627+1258631409309+28353475&threadId=1331600

It seems that you might solve the problem by installing openssl A.00.09.08g.031 or later. The latest version (.08k) is available here:

https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=OPENSSL11I

HTH.

Best regards,
Fabio

[Steven Schweda]

Updating OpenSSL seems to solve the problem.
Thanks.

> Check for the following ITRC thread:

You don't need all that when citing a thread
here. This works (perhaps better, certainly
shorter):

http://forums.itrc.hp.com/service/forums/questionanswer.do?threadId=1331600

I might have found that, but I think that my
search included "/usr/lib/hpux64/dld.so",
and that thread had a PA-RISC version of the
message ("/usr/lib/pa20_64/dld.sl"). Sigh.
I did try a search. Honest.

[Steven Schweda]

.