Bug#749472: openssh-server: openssl restart failure when upgrading from wheezy: OpenSSL version mismatch. Built against 1000105f, you have 10001080

2014-06-28 Thread Colin Watson
Control: notfound -1 openssh/1:6.6p1-5
Control: found -1 openssh/1:6.0p1-4

On Tue, May 27, 2014 at 04:14:26PM +0800, Paul Wise wrote:
 Package: openssh-server
 Version: 1:6.6p1-5
 Severity: important
 
 When I upgrade from wheezy to jessie on a machine with openssh-server
 installed, the openssl package tries to restart openssh but fails:
[...]
 OpenSSL version mismatch. Built against 1000105f, you have 10001080

So, 1:6.6p1-5 is actually fine here; it has this check removed on the
grounds that it does more harm than good given OpenSSL's modern SONAME
management practices (see #664383 and #732940; unfortunately I
incorrectly dropped that patch shortly before wheezy).  The problem here
is that libssl1.0.0 is upgraded before openssh-server, and the version
in wheezy doesn't have that check patched out, so the attempted restart
fails.

Kurt, perhaps it would be worth considering Breaks: openssh-server (
1:6.4p1-2) in libssl1.0.0 in jessie?

I'll also see if I can get an update to wheezy issued that removes this
check, which should also simplify things.  (In that case, perhaps the
control field in libssl1.0.0 should be Breaks: openssh-server (
1:6.0p1-4+deb7u2).)

-- 
Colin Watson   [cjwat...@debian.org]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#749472: [Pkg-openssl-devel] Bug#749472: openssh-server: openssl restart failure when upgrading from wheezy: OpenSSL version mismatch. Built against 1000105f, you have 10001080

2014-06-28 Thread Kurt Roeckx
On Sat, Jun 28, 2014 at 02:23:19PM +0100, Colin Watson wrote:
 Kurt, perhaps it would be worth considering Breaks: openssh-server (
 1:6.4p1-2) in libssl1.0.0 in jessie?

I was supposed to add the Breaks again when using the git snapshot,
but forgot about it.  I'll add it again.


Kurt


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#749472: [Pkg-openssl-devel] Bug#749472: openssh-server: openssl restart failure when upgrading from wheezy: OpenSSL version mismatch. Built against 1000105f, you have 10001080

2014-06-28 Thread Colin Watson
On Sat, Jun 28, 2014 at 04:03:47PM +0200, Kurt Roeckx wrote:
 On Sat, Jun 28, 2014 at 02:23:19PM +0100, Colin Watson wrote:
  Kurt, perhaps it would be worth considering Breaks: openssh-server (
  1:6.4p1-2) in libssl1.0.0 in jessie?
 
 I was supposed to add the Breaks again when using the git snapshot,
 but forgot about it.  I'll add it again.

Great, thanks.  Hopefully that will clear this up.

-- 
Colin Watson   [cjwat...@debian.org]


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org



Bug#749472: openssh-server: openssl restart failure when upgrading from wheezy: OpenSSL version mismatch. Built against 1000105f, you have 10001080

2014-05-27 Thread Paul Wise
Package: openssh-server
Version: 1:6.6p1-5
Severity: important

When I upgrade from wheezy to jessie on a machine with openssh-server
installed, the openssl package tries to restart openssh but fails:

# apt-get update
...
# apt-get -y upgrade
...
Preparing to unpack .../libssl1.0.0_1.0.1g-4_amd64.deb ...
Unpacking libssl1.0.0:amd64 (1.0.1g-4) over (1.0.1e-2+deb7u9) ...
Setting up libssl1.0.0:amd64 (1.0.1g-4) ...
Checking for services that may need to be restarted...done.
Checking for services that may need to be restarted...done.
Checking init scripts...

Restarting services possibly affected by the upgrade:
OpenSSL version mismatch. Built against 1000105f, you have 10001080
invoke-rc.d: initscript ssh, action restart failed.

Configuring libssl1.0.0:amd64
-

Failure restarting some services for OpenSSL upgrade

The following services could not be restarted for the OpenSSL library upgrade:

ssh

You will need to start these manually by running '/etc/init.d/service start'.

-- System Information:
Debian Release: jessie/sid
  APT prefers testing
  APT policy: (900, 'testing'), (800, 'unstable'), (700, 'experimental')
Architecture: amd64 (x86_64)

Kernel: Linux 3.14-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=en_AU.utf8, LC_CTYPE=en_AU.utf8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages openssh-server depends on:
ii  adduser3.113+nmu3
ii  debconf [debconf-2.0]  1.5.53
ii  dpkg   1.17.9
ii  init-system-helpers1.18
ii  libc6  2.18-7
ii  libcomerr2 1.42.10-1
ii  libgssapi-krb5-2   1.12.1+dfsg-1
ii  libkrb5-3  1.12.1+dfsg-1
ii  libpam-modules 1.1.8-3
ii  libpam-runtime 1.1.8-3
ii  libpam0g   1.1.8-3
ii  libselinux12.3-1
ii  libssl1.0.01.0.1g-4
ii  libwrap0   7.6.q-25
ii  lsb-base   4.1+Debian12
ii  openssh-client 1:6.6p1-5
ii  openssh-sftp-server1:6.6p1-5
ii  procps 1:3.3.9-2
ii  zlib1g 1:1.2.8.dfsg-1

Versions of packages openssh-server recommends:
ii  ncurses-term  5.9+20140118-1
ii  xauth 1:1.0.7-1

Versions of packages openssh-server suggests:
pn  molly-guard  none
pn  monkeysphere none
pn  rssh none
ii  ssh-askpass-gnome [ssh-askpass]  1:6.6p1-5
pn  ufw  none

-- 
bye,
pabs

http://wiki.debian.org/PaulWise


signature.asc
Description: This is a digitally signed message part