Thread: BUG #8659: Broken dependencies on RHEL6 for 9.2.6 RPMs
The following bug has been logged on the website: Bug reference: 8659 Logged by: Vitaly Tskhovrebov Email address: vitaly@tskhovrebov.ru PostgreSQL version: 9.2.6 Operating system: RHEL6 Description: Hello. I have updated Redhat 6 machine with postgresql 9.2.2 installed from pgdg92 repo. My update attempts fails with errors in dependency resolution, complaining about libcrypto and libssl availability. However, here's what I found out: yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 Loaded plugins: check_update, downloadonly, priorities, product-id, security Finding dependencies: package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6 dependency: libssl.so.10(libssl.so.10)(64bit) Unsatisfied dependency dependency: libssl.so.10()(64bit) provider: openssl.x86_64 1.0.0-27.el6_4.2 provider: openssl.x86_64 1.0.0-20.el6_2.5 dependency: libcrypto.so.10(libcrypto.so.10)(64bit) Unsatisfied dependency dependency: libcrypto.so.10()(64bit) provider: openssl.x86_64 1.0.0-27.el6_4.2 provider: openssl.x86_64 1.0.0-20.el6_2.5 Looks like libcrypto.so.10()(64bit) is available, but libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not. Please advise. Thanks.
On 12/05/13 10:02, vitaly@tskhovrebov.ru wrote:
> The following bug has been logged on the website:
>
> Bug reference: 8659
> Logged by: Vitaly Tskhovrebov
> Email address: vitaly@tskhovrebov.ru
> PostgreSQL version: 9.2.6
> Operating system: RHEL6
> Description:
>
> Hello.
>
>
> I have updated Redhat 6 machine with postgresql 9.2.2 installed from pgdg92
> repo.
>
>
> My update attempts fails with errors in dependency resolution, complaining
> about libcrypto and libssl availability. However, here's what I found out:
>
>
> yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> Loaded plugins: check_update, downloadonly, priorities, product-id,
> security
> Finding dependencies:
> package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
> dependency: libssl.so.10(libssl.so.10)(64bit)
> Unsatisfied dependency
>
>
> dependency: libssl.so.10()(64bit)
> provider: openssl.x86_64 1.0.0-27.el6_4.2
> provider: openssl.x86_64 1.0.0-20.el6_2.5
> dependency: libcrypto.so.10(libcrypto.so.10)(64bit)
> Unsatisfied dependency
> dependency: libcrypto.so.10()(64bit)
> provider: openssl.x86_64 1.0.0-27.el6_4.2
> provider: openssl.x86_64 1.0.0-20.el6_2.5
>
>
>
>
> Looks like libcrypto.so.10()(64bit) is available, but
> libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not.
I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
Is it possible that your openssl is installed from some other repository than RHN?
sudo yum localinstall pgdg-centos92-9.2-6.noarch.rpm
[vagrant@jefftest ~]$ sudo yum install postgresql92-server
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.mirror.freedomvoice.com
* extras: mirror.raystedman.net
* updates: mirrors.kernel.org
pgdg92
| 2.8 kB 00:00
pgdg92/primary_db
| 149 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Running transaction check
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
--> Processing Dependency: openssl = 1.0.0-27.el6_4.2 for package:
openssl-devel-1.0.0-27.el6_4.2.x86_64
---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package openssl-devel.x86_64 0:1.0.0-27.el6_4.2 will be updated
---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5 will be an update
--> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k
Updating for dependencies:
openssl
x86_64
1.0.1e-16.el6_5
updates 1.5 M
openssl-devel
x86_64
1.0.1e-16.el6_5
updates 1.2 M
Transaction Summary
=============================================================================================================================================================================================
Install 3 Package(s)
Upgrade 2 Package(s)
Total download size: 7.6 M
Is this ok [y/N]: y
Downloading Packages:
(1/5):
openssl-1.0.1e-16.el6_5.x86_64.rpm
| 1.5 MB 00:00
(2/5):
openssl-devel-1.0.1e-16.el6_5.x86_64.rpm
| 1.2 MB 00:00
(3/5):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(4/5):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(5/5):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:01
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
2.3 MB/s | 7.6 MB 00:03
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Updating :
openssl-1.0.1e-16.el6_5.x86_64
1/7
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
3/7
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Updating :
openssl-devel-1.0.1e-16.el6_5.x86_64
5/7
Cleanup :
openssl-devel-1.0.0-27.el6_4.2.x86_64
6/7
Cleanup :
openssl-1.0.0-27.el6_4.2.x86_64
7/7
Verifying :
openssl-devel-1.0.1e-16.el6_5.x86_64
1/7
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Verifying :
openssl-1.0.1e-16.el6_5.x86_64
3/7
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
5/7
Verifying :
openssl-1.0.0-27.el6_4.2.x86_64
6/7
Verifying :
openssl-devel-1.0.0-27.el6_4.2.x86_64
7/7
Installed:
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6
Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6
Dependency Updated:
openssl.x86_64
0:1.0.1e-16.el6_5
openssl-devel.x86_64
0:1.0.1e-16.el6_5
Complete!
Ok, Redhat is in question. I understand the similarities with Centos, but still. I repeated process using very fresh install of redhat just specially for this and was able to reproduce the issue. On Thu, Dec 5, 2013 at 3:30 PM, Jeff Frost <jeff@pgexperts.com> wrote: > On 12/05/13 10:02, vitaly@tskhovrebov.ru wrote: > > The following bug has been logged on the website: > > > > Bug reference: 8659 > > Logged by: Vitaly Tskhovrebov > > Email address: vitaly@tskhovrebov.ru > > PostgreSQL version: 9.2.6 > > Operating system: RHEL6 > > Description: > > > > Hello. > > > > > > I have updated Redhat 6 machine with postgresql 9.2.2 installed from > pgdg92 > > repo. > > > > > > My update attempts fails with errors in dependency resolution, > complaining > > about libcrypto and libssl availability. However, here's what I found > out: > > > > > > yum deplist --enablerepo=pg92 > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > > Loaded plugins: check_update, downloadonly, priorities, product-id, > > security > > Finding dependencies: > > package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6 > > dependency: libssl.so.10(libssl.so.10)(64bit) > > Unsatisfied dependency > > > > > > dependency: libssl.so.10()(64bit) > > provider: openssl.x86_64 1.0.0-27.el6_4.2 > > provider: openssl.x86_64 1.0.0-20.el6_2.5 > > dependency: libcrypto.so.10(libcrypto.so.10)(64bit) > > Unsatisfied dependency > > dependency: libcrypto.so.10()(64bit) > > provider: openssl.x86_64 1.0.0-27.el6_4.2 > > provider: openssl.x86_64 1.0.0-20.el6_2.5 > > > > > > > > > > Looks like libcrypto.so.10()(64bit) is available, but > > libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not. > > I just tested it on a freshly installed CentOS 6.4 host and it worked fine. > Is it possible that your openssl is installed from some other repository > than RHN? > > sudo yum localinstall pgdg-centos92-9.2-6.noarch.rpm > > [vagrant@jefftest ~]$ sudo yum install postgresql92-server > Loaded plugins: fastestmirror > Loading mirror speeds from cached hostfile > * base: centos.mirror.freedomvoice.com > * extras: mirror.raystedman.net > * updates: mirrors.kernel.org > pgdg92 > | 2.8 kB 00:00 > pgdg92/primary_db > | 149 kB 00:00 > Setting up Install Process > Resolving Dependencies > --> Running transaction check > ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be > installed > --> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package: > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > --> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for > package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > --> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package: > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > --> Processing Dependency: libpq.so.5()(64bit) for package: > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > --> Running transaction check > ---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated > --> Processing Dependency: openssl = 1.0.0-27.el6_4.2 for package: > openssl-devel-1.0.0-27.el6_4.2.x86_64 > ---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update > ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > --> Running transaction check > ---> Package openssl-devel.x86_64 0:1.0.0-27.el6_4.2 will be updated > ---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5 will be an update > --> Finished Dependency Resolution > > Dependencies Resolved > > > ============================================================================================================================================================================================= > Package > Arch > Version > Repository Size > > ============================================================================================================================================================================================= > Installing: > postgresql92-server > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 3.8 M > Installing for dependencies: > postgresql92 > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 971 k > postgresql92-libs > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 187 k > Updating for dependencies: > openssl > x86_64 > 1.0.1e-16.el6_5 > updates 1.5 M > openssl-devel > x86_64 > 1.0.1e-16.el6_5 > updates 1.2 M > > Transaction Summary > > ============================================================================================================================================================================================= > Install 3 Package(s) > Upgrade 2 Package(s) > > Total download size: 7.6 M > Is this ok [y/N]: y > Downloading Packages: > (1/5): > openssl-1.0.1e-16.el6_5.x86_64.rpm > | 1.5 MB 00:00 > (2/5): > openssl-devel-1.0.1e-16.el6_5.x86_64.rpm > | 1.2 MB 00:00 > (3/5): > postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm > | 971 kB 00:00 > (4/5): > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm > | 187 kB 00:00 > (5/5): > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm > | 3.8 MB 00:01 > > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > Total > 2.3 MB/s | 7.6 MB 00:03 > Running rpm_check_debug > Running Transaction Test > Transaction Test Succeeded > Running Transaction > Updating : > openssl-1.0.1e-16.el6_5.x86_64 > 1/7 > Installing : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 2/7 > Installing : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 3/7 > Installing : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 4/7 > Updating : > openssl-devel-1.0.1e-16.el6_5.x86_64 > 5/7 > Cleanup : > openssl-devel-1.0.0-27.el6_4.2.x86_64 > 6/7 > Cleanup : > openssl-1.0.0-27.el6_4.2.x86_64 > 7/7 > Verifying : > openssl-devel-1.0.1e-16.el6_5.x86_64 > 1/7 > Verifying : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 2/7 > Verifying : > openssl-1.0.1e-16.el6_5.x86_64 > 3/7 > Verifying : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 4/7 > Verifying : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 5/7 > Verifying : > openssl-1.0.0-27.el6_4.2.x86_64 > 6/7 > Verifying : > openssl-devel-1.0.0-27.el6_4.2.x86_64 > 7/7 > > Installed: > postgresql92-server.x86_64 > 0:9.2.6-1PGDG.rhel6 > > > Dependency Installed: > postgresql92.x86_64 > 0:9.2.6-1PGDG.rhel6 > postgresql92-libs.x86_64 > 0:9.2.6-1PGDG.rhel6 > > Dependency Updated: > openssl.x86_64 > 0:1.0.1e-16.el6_5 > openssl-devel.x86_64 > 0:1.0.1e-16.el6_5 > > Complete! > > > > >
By the way, openssl 1.0.1e is not available for redhat 6 yet.
On 12/05/13 12:42, Vitaly Tskhovrebov wrote: > Ok, Redhat is in question. I understand the similarities with Centos, but > still. > > I repeated process using very fresh install of redhat just specially for > this and was able to reproduce the issue. I also just tested it successfully on Scientific Linux 6. Unfortunately, I don't have access to a RHEL6 server. Is it possible that the RHN security/update repositories are disabled?
On 12/05/13 12:44, Vitaly Tskhovrebov wrote: > By the way, openssl 1.0.1e is not available for redhat 6 yet. Oh, interesting. Well, I just took a look at the spec file and we don't specifically require 1.0.1e, it probably just gets baked in due to the build process. Can you try rebuilding from the source rpm on a RHEL6 host: http://yum.postgresql.org/srpms/9.2/redhat/rhel-6-x86_64/repoview/postgresql92.html -- Jeff Frost <jeff@pgexperts.com> CTO, PostgreSQL Experts, Inc. Phone: 1-888-PG-EXPRT x506 FAX: 415-762-5122 http://www.pgexperts.com/
On 12/05/13 12:44, Jeff Frost wrote:
> On 12/05/13 12:42, Vitaly Tskhovrebov wrote:
>> Ok, Redhat is in question. I understand the similarities with Centos, but
>> still.
>>
>> I repeated process using very fresh install of redhat just specially for
>> this and was able to reproduce the issue.
> I also just tested it successfully on Scientific Linux 6. Unfortunately, I
> don't have access to a RHEL6 server.
>
>
> Is it possible that the RHN security/update repositories are disabled?
>
>
>
>
Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
fine. Also, it seems to have openssl-1.0.1e already:
$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)
yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm
yum install postgresql92-server postgresql92-contrib
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6 for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-contrib
x86_64
9.2.6-1PGDG.rhel6
pgdg92 436 k
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k
Transaction Summary
=============================================================================================================================================================================================
Install 4 Package(s)
Total download size: 5.4 M
Installed size: 23 M
Is this ok [y/N]: y
Downloading Packages:
(1/4):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(2/4):
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
| 436 kB 00:00
(3/4):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(4/4):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
3.4 MB/s | 5.4 MB 00:01
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
1/4
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
2/4
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Installing :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
1/4
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/4
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Verifying :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4
Installed:
postgresql92-contrib.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6
Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6
rpm -qa |grep openssl
openssl-1.0.1e-16.el6_5.x86_64
openssl-devel-1.0.1e-16.el6_5.x86_64
yum info openssl
Loaded plugins: amazon-id, rhui-lb, security
Installed Packages
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5
Size : 4.0 M
Repo : installed
From repo : rhui-REGION-rhel-server-releases
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
between
: machines. OpenSSL includes a certificate management tool and shared
: libraries which provide various cryptographic algorithms and
: protocols.
From what repo does this 101e come from? On Thursday, December 5, 2013, Jeff Frost wrote: > On 12/05/13 12:44, Jeff Frost wrote: > > On 12/05/13 12:42, Vitaly Tskhovrebov wrote: > >> Ok, Redhat is in question. I understand the similarities with Centos, > but > >> still. > >> > >> I repeated process using very fresh install of redhat just specially for > >> this and was able to reproduce the issue. > > I also just tested it successfully on Scientific Linux 6. Unfortunately, > I > > don't have access to a RHEL6 server. > > > > > > Is it possible that the RHN security/update repositories are disabled? > > > > > > > > > > Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just > fine. Also, it seems to have openssl-1.0.1e already: > > $ cat /etc/redhat-release > Red Hat Enterprise Linux Server release 6.4 (Santiago) > > yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm > > yum install postgresql92-server postgresql92-contrib > Loaded plugins: amazon-id, rhui-lb, security > Setting up Install Process > Resolving Dependencies > --> Running transaction check > ---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be > installed > --> Processing Dependency: postgresql92 = 9.2.6 for package: > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > --> Processing Dependency: libpq.so.5()(64bit) for package: > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be > installed > --> Running transaction check > ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > --> Finished Dependency Resolution > > Dependencies Resolved > > > ============================================================================================================================================================================================= > Package > Arch > Version > Repository Size > > ============================================================================================================================================================================================= > Installing: > postgresql92-contrib > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 436 k > postgresql92-server > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 3.8 M > Installing for dependencies: > postgresql92 > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 971 k > postgresql92-libs > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 187 k > > Transaction Summary > > ============================================================================================================================================================================================= > Install 4 Package(s) > > Total download size: 5.4 M > Installed size: 23 M > Is this ok [y/N]: y > Downloading Packages: > (1/4): > postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm > | 971 kB 00:00 > (2/4): > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm > | 436 kB 00:00 > (3/4): > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm > | 187 kB 00:00 > (4/4): > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm > | 3.8 MB 00:00 > > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > Total > 3.4 MB/s | 5.4 MB 00:01 > Running rpm_check_debug > Running Transaction Test > Transaction Test Succeeded > Running Transaction > Installing : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 1/4 > Installing : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 2/4 > Installing : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 3/4 > Installing : > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > 4/4 > Verifying : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 1/4 > Verifying : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 2/4 > Verifying : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 3/4 > Verifying : > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > 4/4 > > Installed: > postgresql92-contrib.x86_64 > 0:9.2.6-1PGDG.rhel6 > postgresql92-server.x86_64 > 0:9.2.6-1PGDG.rhel6 > > Dependency Installed: > postgresql92.x86_64 > 0:9.2.6-1PGDG.rhel6 > postgresql92-libs.x86_64 > 0:9.2.6-1PGDG.rhel6 > > > rpm -qa |grep openssl > openssl-1.0.1e-16.el6_5.x86_64 > openssl-devel-1.0.1e-16.el6_5.x86_64 > > yum info openssl > Loaded plugins: amazon-id, rhui-lb, security > Installed Packages > Name : openssl > Arch : x86_64 > Version : 1.0.1e > Release : 16.el6_5 > Size : 4.0 M > Repo : installed > From repo : rhui-REGION-rhel-server-releases > Summary : A general purpose cryptography library with TLS > implementation > URL : http://www.openssl.org/ > License : OpenSSL > Description : The OpenSSL toolkit provides support for secure > communications > between > : machines. OpenSSL includes a certificate management tool and > shared > : libraries which provide various cryptographic algorithms and > : protocols. > >
It's in the yum info down below: rhui-REGION-rhel-server-releases which is defined as: [rhui-REGION-rhel-server-releases] name=Red Hat Enterprise Linux Server 6 (RPMs) mirrorlist=https://rhui2-cds01.REGION.aws.ce.redhat.com/pulp/mirror/content/dist/rhel/rhui/server/6/$releasever/$basearch/os enabled=1 gpgcheck=1 gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release sslverify=1 sslclientkey=/etc/pki/rhui/content-rhel6.key sslclientcert=/etc/pki/rhui/product/content-rhel6.crt sslcacert=/etc/pki/rhui/cdn.redhat.com-chain.crt On 12/05/13 14:34, Vitaly Tskhovrebov wrote: > From what repo does this 101e come from? > > On Thursday, December 5, 2013, Jeff Frost wrote: > > On 12/05/13 12:44, Jeff Frost wrote: > > On 12/05/13 12:42, Vitaly Tskhovrebov wrote: > >> Ok, Redhat is in question. I understand the similarities with Centos, but > >> still. > >> > >> I repeated process using very fresh install of redhat just specially for > >> this and was able to reproduce the issue. > > I also just tested it successfully on Scientific Linux 6. Unfortunately, I > > don't have access to a RHEL6 server. > > > > > > Is it possible that the RHN security/update repositories are disabled? > > > > > > > > > > Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just > fine. Also, it seems to have openssl-1.0.1e already: > > $ cat /etc/redhat-release > Red Hat Enterprise Linux Server release 6.4 (Santiago) > > yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm > > yum install postgresql92-server postgresql92-contrib > Loaded plugins: amazon-id, rhui-lb, security > Setting up Install Process > Resolving Dependencies > --> Running transaction check > ---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be > installed > --> Processing Dependency: postgresql92 = 9.2.6 for package: > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > --> Processing Dependency: libpq.so.5()(64bit) for package: > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be > installed > --> Running transaction check > ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed > --> Finished Dependency Resolution > > Dependencies Resolved > > ============================================================================================================================================================================================= > Package > Arch > Version > Repository Size > ============================================================================================================================================================================================= > Installing: > postgresql92-contrib > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 436 k > postgresql92-server > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 3.8 M > Installing for dependencies: > postgresql92 > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 971 k > postgresql92-libs > x86_64 > 9.2.6-1PGDG.rhel6 > pgdg92 187 k > > Transaction Summary > ============================================================================================================================================================================================= > Install 4 Package(s) > > Total download size: 5.4 M > Installed size: 23 M > Is this ok [y/N]: y > Downloading Packages: > (1/4): > postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm > | 971 kB 00:00 > (2/4): > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm > | 436 kB 00:00 > (3/4): > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm > | 187 kB 00:00 > (4/4): > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm > | 3.8 MB 00:00 > --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- > Total > 3.4 MB/s | 5.4 MB 00:01 > Running rpm_check_debug > Running Transaction Test > Transaction Test Succeeded > Running Transaction > Installing : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 1/4 > Installing : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 2/4 > Installing : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 3/4 > Installing : > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > 4/4 > Verifying : > postgresql92-9.2.6-1PGDG.rhel6.x86_64 > 1/4 > Verifying : > postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64 > 2/4 > Verifying : > postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > 3/4 > Verifying : > postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64 > 4/4 > > Installed: > postgresql92-contrib.x86_64 > 0:9.2.6-1PGDG.rhel6 > postgresql92-server.x86_64 > 0:9.2.6-1PGDG.rhel6 > > Dependency Installed: > postgresql92.x86_64 > 0:9.2.6-1PGDG.rhel6 > postgresql92-libs.x86_64 > 0:9.2.6-1PGDG.rhel6 > > > rpm -qa |grep openssl > openssl-1.0.1e-16.el6_5.x86_64 > openssl-devel-1.0.1e-16.el6_5.x86_64 > > yum info openssl > Loaded plugins: amazon-id, rhui-lb, security > Installed Packages > Name : openssl > Arch : x86_64 > Version : 1.0.1e > Release : 16.el6_5 > Size : 4.0 M > Repo : installed > From repo : rhui-REGION-rhel-server-releases > Summary : A general purpose cryptography library with TLS implementation > URL : http://www.openssl.org/ > License : OpenSSL > Description : The OpenSSL toolkit provides support for secure communications > between > : machines. OpenSSL includes a certificate management tool > and shared > : libraries which provide various cryptographic algorithms and > : protocols. > -- Jeff Frost <jeff@pgexperts.com> CTO, PostgreSQL Experts, Inc. Phone: 1-888-PG-EXPRT x506 FAX: 415-762-5122 http://www.pgexperts.com/
Vitaly Tskhovrebov <vitaly@tskhovrebov.ru> writes:
> By the way, openssl 1.0.1e is not available for redhat 6 yet.
You are mistaken. On my RHEL6 machine I see
$ rpm -qa | grep openssl
openssl-devel-1.0.1e-16.el6_5.x86_64
openssl-1.0.1e-16.el6_5.x86_64
A quick look in yum.log says it was updated a couple weeks ago:
Jul 21 14:26:18 Updated: openssl-1.0.0-27.el6_4.2.x86_64
Jul 21 14:27:18 Updated: openssl-devel-1.0.0-27.el6_4.2.x86_64
Nov 21 10:42:01 Updated: openssl-1.0.1e-16.el6_5.x86_64
Nov 21 10:46:30 Updated: openssl-devel-1.0.1e-16.el6_5.x86_64
regards, tom lane
On 12/5/2013 12:30 PM, Jeff Frost wrote:
> I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
> Is it possible that your openssl is installed from some other repository than RHN?
I tested much the same, with a not-quite-fresh c6.4 host that had been
yum updated shortly /before/ CentOS 6.5 was released, I yum installed
postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
this is a RHEL specific issue somehow ?
--
john r pierce 37N 122W
somewhere on the middle of the left coast
On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce@hogranch.com> wrote:
> On 12/5/2013 12:30 PM, Jeff Frost wrote:
>
>> I just tested it on a freshly installed CentOS 6.4 host and it worked
>> fine.
>> Is it possible that your openssl is installed from some other repository
>> than RHN?
>>
>
> I tested much the same, with a not-quite-fresh c6.4 host that had been yum
> updated shortly /before/ CentOS 6.5 was released, I yum installed
> postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
> this is a RHEL specific issue somehow ?
>
>
I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
without doing any updates at all from the repositories before trying. This
machine does not currently have any subscription at all, so it's the fresh
RHEL 6.4, and postgres does not install.
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
On Fri, Dec 6, 2013 at 9:14 AM, Magnus Hagander <magnus@hagander.net> wrote:
>
> On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce@hogranch.com>wrote:
>
>> On 12/5/2013 12:30 PM, Jeff Frost wrote:
>>
>>> I just tested it on a freshly installed CentOS 6.4 host and it worked
>>> fine.
>>> Is it possible that your openssl is installed from some other repository
>>> than RHN?
>>>
>>
>> I tested much the same, with a not-quite-fresh c6.4 host that had been
>> yum updated shortly /before/ CentOS 6.5 was released, I yum installed
>> postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
>> this is a RHEL specific issue somehow ?
>>
>>
> I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
> without doing any updates at all from the repositories before trying. This
> machine does not currently have any subscription at all, so it's the fresh
> RHEL 6.4, and postgres does not install.
>
>
I should add - explicitly installing openssl's latest version (with just
yum install openssl *instead of* yum update), made PostgreSQL work.
I think that basically says you need openssl from 6.5 to make it work. But
you don't need a full update to 6.5. I think that dependency should sitll
be fixed.
--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/
On 12/6/2013 12:14 AM, Magnus Hagander wrote: > > > > I can confirm that this breaks on a freshly installed RHEL 6.4, from > iso, without doing any updates at all from the repositories before > trying. This machine does not currently have any subscription at all, > so it's the fresh RHEL 6.4, and postgres does not install. redhat without a subscription, yum can't access any dependencies since you have no access to the redhat network. centos doesn't have this problem :) -- john r pierce 37N 122W somewhere on the middle of the left coast
On Dec 6, 2013 10:11 AM, "John R Pierce" <pierce@hogranch.com> wrote: > > On 12/6/2013 12:14 AM, Magnus Hagander wrote: >>> >>> >> >> I can confirm that this breaks on a freshly installed RHEL 6.4, from iso, without doing any updates at all from the repositories before trying. This machine does not currently have any subscription at all, so it's the fresh RHEL 6.4, and postgres does not install. > > > redhat without a subscription, yum can't access any dependencies since you have no access to the redhat network. Of course. I know this, and did that intentionally to provoke the problem. The problem persists once you enable the subscription, unless you also upgrade at that time. However, if you enable the subscription first I bet it pulls down the 6.5 version automatically. Which is why the problem doesn't show up on a freshly installed box, only on those that already existed but weren't upgraded. /Magnus
My question is: if 9.2.6 doesn't explicitly use features of openssl 1.0.1, why limit the package to work with this version only? Why openssl 1.0.0 is no good? Despite of the fact that I was mistaken of availability of fresh openssl package, the situation doesn't make sense to me. -- Vitaly Tskhovrebov +1 (914) 433-7683
Magnus Hagander <magnus@hagander.net> writes:
> I think that basically says you need openssl from 6.5 to make it work. But
> you don't need a full update to 6.5. I think that dependency should sitll
> be fixed.
Essentially, you're asking Devrim to downgrade his build box to a known
insecure version of OpenSSL. I won't be surprised if his answer isn't
printable. It almost certainly won't be "okay".
(And no, I don't have a lot of sympathy for people running RHEL without
a subscription.)
regards, tom lane
On Fri, Dec 6, 2013 at 3:44 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote: > Magnus Hagander <magnus@hagander.net> writes: > > I think that basically says you need openssl from 6.5 to make it work. > But > > you don't need a full update to 6.5. I think that dependency should sitll > > be fixed. > > Essentially, you're asking Devrim to downgrade his build box to a known > insecure version of OpenSSL. I won't be surprised if his answer isn't > printable. It almost certainly won't be "okay". > No, I'm not. But that's maybe because I don't know how those things are set up. What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the user is on 6.5, it will still match, and not be a problem. I don't know how it works in the RedHat world, but in debian that would just be a "depend on openssl version x.y.z or higher". I can't believe that's too hard. > (And no, I don't have a lot of sympathy for people running RHEL without > a subscription.) > That's not the usecase I care about. I don't have any sympathy for those either. I'm talking about the people who have not yet upgraded to 6.5, since it was only released two weeks ago. You know, kind of like how we still support 9.2 even though 9.3 was released months ago. But those people can no longer upgrade PostgreSQL to a release that doesn't contain known dataloss bugs. (Actually they can, by manually installing openssl from 6.5 first - but that's really more of a workaround than a fix) It might be that it's too much work to deal with something like that. I just wanted it to be properly investigate that this really is that case. It just seems to be that it *should* be an easy fix, but maybe it's not. -- Magnus Hagander Me: http://www.hagander.net/ Work: http://www.redpill-linpro.com/
Despite of sympathy on subscription basis: I either should be allowed to build my own postgres from srpm, and uuid-devel dependency should be resolvable, Or there should be a really strong reason to use 1.0.1e instead of 1.0.0, other than downgrading a box. Basically, 1.0.0 isn't that insecure, otherwise redhat would notify us on imminent threat. There are tons of other situations available where redhat subscription will not work that good, including production db zone without direct access of internet resources. I would ask people not to come down this road and concentrate on specific issue: The bug is titled: broken dependency for rhel6. This because by dependency definition package is fine with openssl version installed officially, but somehow expects yum to figure out that Devrim will be happy should it use another package version.
Magnus Hagander <magnus@hagander.net> writes:
> What I'm asking for is the 9.2 postgresql packages to depend on a version
> of openssl that's present in 6.4. If the user is on 6.5, it will still
> match, and not be a problem.
> I don't know how it works in the RedHat world, but in debian that would
> just be a "depend on openssl version x.y.z or higher". I can't believe
> that's too hard.
The dependency in question is one that's auto-generated during the package
build, so the only way Devrim could change this is by downgrading the
package he builds against.
Having said that, though, I'm pretty confused as to what's happening.
The original complaint claimed that libssl.so.10 and libcrypto.so.10
weren't present, but I see those both on my current machine and in
a backup from a couple months ago (when I still had
openssl-1.0.0-27.el6_4.2.x86_64 installed). So it's far from apparent
what it is that the PGDG RPM is depending on that wouldn't be there.
regards, tom lane
Hi, On Fri, 2013-12-06 at 09:44 -0500, Tom Lane wrote: > Essentially, you're asking Devrim to downgrade his build box to a > known insecure version of OpenSSL. I won't be surprised if his answer > isn't printable. It almost certainly won't be "okay". Right -- I am not interested in downgrading a package. RHEL 6.5 has been out for a while, and supporting both RHEL 6.5 and 6.4 at the same time would be pain for us. Even if we did it, what happens when 6.6 is released and people still ask for 6.4? SRPMS are out there, for the people who cannot upgrade and rebuild the RPMs on their machines. Regards, -- Devrim GÜNDÜZ Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer Community: devrim~PostgreSQL.org, devrim.gunduz~linux.org.tr http://www.gunduz.org Twitter: http://twitter.com/devrimgunduz
Hi, On Fri, 2013-12-06 at 10:12 -0500, Vitaly Tskhovrebov wrote: > I either should be allowed to build my own postgres from srpm, You are: http://yum.postgresql.org/srpms/9.2/redhat/rhel-6-x86_64/repoview/postgresql92.html > and uuid-devel dependency should be resolvable, It is also doable by passing --define "uuid 0" to the SRPM. uuid is a predefined conditional in spec file: http://svn.pgrpms.org/browser/rpm/redhat/9.2/postgresql/EL-6/postgresql-9.2.spec#L67 and here is how to do it: http://svn.pgrpms.org/browser/rpm/redhat/9.2/postgresql/EL-6/README.rpm-dist#L290 > Or there should be a really strong reason to use 1.0.1e instead of > 1.0.0, other than downgrading a box. Basically, 1.0.0 isn't that > insecure, otherwise redhat would notify us on imminent threat. I saw at least 3 announcements recently for an update -- mostly bug fixes, though. > There are tons of other situations available where redhat subscription > will not work that good, including production db zone without direct > access of internet resources. I would ask people not to come down this > road and concentrate on specific issue: > > The bug is titled: broken dependency for rhel6. This because by > dependency definition package is fine with openssl version installed > officially, but somehow expects yum to figure out that Devrim will be > happy should it use another package version. As Tom stated, it is the auto dependency picker that is picking up the openssl dependency. We don't depend on OpenSSL anywhere. What if we build with the older version, and then it is broken with the new one? Regards, -- Devrim GÜNDÜZ Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer Community: devrim~PostgreSQL.org, devrim.gunduz~linux.org.tr http://www.gunduz.org Twitter: http://twitter.com/devrimgunduz
On 12/6/2013 6:53 AM, Magnus Hagander wrote: > What I'm asking for is the 9.2 postgresql packages to depend on a > version of openssl that's present in 6.4. If the user is on 6.5, it > will still match, and not be a problem. I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system wasn't properly configured with RHN. -- john r pierce 37N 122W somewhere on the middle of the left coast
On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce@hogranch.com> wrote: > On 12/6/2013 6:53 AM, Magnus Hagander wrote: >> What I'm asking for is the 9.2 postgresql packages to depend on a = version of openssl that's present in 6.4. If the user is on 6.5, it will = still match, and not be a problem. >=20 > I don't get it, on my centos 6.4 box, yum pulled in the new openssl = automatically. I wonder if the OP's system wasn't properly configured = with RHN. >=20 Well, the issue seems to be specific to RHEL, but if you look way back = in the thread, I actually spun up a RHEL6.4 instance on EC2 and it = happily installed the new version of openssl when I did "yum install = postgresql92 postgresql92-server postgresql92-contrib", so I'm not = entirely sure why it's broken for some folks on RHEL6.4, but not others.
On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce@hogranch.com> wrote: > On 12/6/2013 6:53 AM, Magnus Hagander wrote: >> What I'm asking for is the 9.2 postgresql packages to depend on a = version of openssl that's present in 6.4. If the user is on 6.5, it will = still match, and not be a problem. >=20 > I don't get it, on my centos 6.4 box, yum pulled in the new openssl = automatically. I wonder if the OP's system wasn't properly configured = with RHN. >=20 Well, the issue seems to be specific to RHEL, but if you look way back = in the thread, I actually spun up a RHEL6.4 instance on EC2 and it = happily installed the new version of openssl when I did "yum install = postgresql92 postgresql92-server postgresql92-contrib", so I'm not = entirely sure why it's broken for some folks on RHEL6.4, but not others.
On 07/12/13 06:36, Jeff Frost wrote:
>
> On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce@hogranch.com> wrote:
>
>> On 12/6/2013 6:53 AM, Magnus Hagander wrote:
>>> What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the
useris on 6.5, it will still match, and not be a problem.
>>
>> I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system
wasn'tproperly configured with RHN.
>>
>
> Well, the issue seems to be specific to RHEL, but if you look way back in the thread, I actually spun up a RHEL6.4
instanceon EC2 and it happily installed the new version of openssl when I did "yum install postgresql92
postgresql92-serverpostgresql92-contrib", so I'm not entirely sure why it's broken for some folks on RHEL6.4, but not
others.
>
Yes, I did the same thing myself (RHEL 6.4 on EC2), and the dependencies
are all satisfied, including libssl from the 6.*5* series.
I note that Vitaly's original message has a strange (to me) looking
option in his dependency check - he did:
$ yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Whereas on my EC2 VM I can do:
$ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
provider: openssl.x86_64 1.0.1e-15.el6
provider: openssl.x86_64 1.0.1e-16.el6_5
....
i.e no enablerepo switch seems to be needed. Also following the
instructions from
http://www.postgresql.org/download/linux/redhat/ does not give me a repo
called pg92, but pgdg92:
$ yum repolist
Loaded plugins: amazon-id, rhui-lb, security
repo id repo name
status
pgdg92 PostgreSQL 9.2 6Server -
x86_64 297
rhui-REGION-client-config-server-6 Red Hat Update Infrastructure
2 4
rhui-REGION-rhel-server-releases Red Hat Enterprise Linux
Server 11,994
rhui-REGION-rhel-server-releases-optional Red Hat Enterprise Linux
Server 6,847
repolist: 19,142
It would be interesting to see what Vataly's machine thinks its yum
repos are, and exactly what he did to set them up.
Cheers
Mark
That's because I created this yum repo file myself, as this host cannot have access to internet. Also, I mirrored yum.postgresql.org into my network so box can access it, no mystery here. Enable=3D0 that's why switch is needed. Of course you have this dependency shown as you already have openssl 1.0.1e installed. But should you try to list them on machine with lower version - it will never mention you need 1.0.1e at all. -- Vitaly Tskhovrebov +1 (914) 433-7683 On Dec 6, 2013, at 5:53 PM, Mark Kirkwood <mark.kirkwood@catalyst.net.nz> w= rote: > On 07/12/13 06:36, Jeff Frost wrote: >> >> On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce@hogranch.com> wrote: >> >>> On 12/6/2013 6:53 AM, Magnus Hagander wrote: >>>> What I'm asking for is the 9.2 postgresql packages to depend on a vers= ion of openssl that's present in 6.4. If the user is on 6.5, it will still = match, and not be a problem. >>> >>> I don't get it, on my centos 6.4 box, yum pulled in the new openssl aut= omatically. I wonder if the OP's system wasn't properly configured with = RHN. >> >> Well, the issue seems to be specific to RHEL, but if you look way back i= n the thread, I actually spun up a RHEL6.4 instance on EC2 and it happily i= nstalled the new version of openssl when I did "yum install postgresql92 po= stgresql92-server postgresql92-contrib", so I'm not entirely sure why it's = broken for some folks on RHEL6.4, but not others. > > Yes, I did the same thing myself (RHEL 6.4 on EC2), and the dependencies = are all satisfied, including libssl from the 6.*5* series. > > I note that Vitaly's original message has a strange (to me) looking optio= n in his dependency check - he did: > > $ yum deplist --enablerepo=3Dpg92 postgresql92-server-9.2.6-1PGDG.rhel6.x= 86_64 > > Whereas on my EC2 VM I can do: > > $ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64 > package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6 > dependency: libssl.so.10(libssl.so.10)(64bit) > provider: openssl.x86_64 1.0.1e-15.el6 > provider: openssl.x86_64 1.0.1e-16.el6_5 > .... > > i.e no enablerepo switch seems to be needed. Also following the instructi= ons from > http://www.postgresql.org/download/linux/redhat/ does not give me a repo = called pg92, but pgdg92: > > $ yum repolist > Loaded plugins: amazon-id, rhui-lb, security > repo id repo name status > pgdg92 PostgreSQL 9.2 6Server - x86_64= 297 > rhui-REGION-client-config-server-6 Red Hat Update Infrastructure 2= 4 > rhui-REGION-rhel-server-releases Red Hat Enterprise Linux Server= 11,994 > rhui-REGION-rhel-server-releases-optional Red Hat Enterprise Linux Server= 6,847 > repolist: 19,142 > > It would be interesting to see what Vataly's machine thinks its yum repos= are, and exactly what he did to set them up. > > Cheers > > Mark >
On 07/12/13 12:36, Vitaly Tskhovrebov wrote:
> That's because I created this yum repo file myself, as this host
> cannot have access to internet. Also, I mirrored yum.postgresql.org
> into my network so box can access it, no mystery here. Enable=0 that's
> why switch is needed.
>
> Of course you have this dependency shown as you already have openssl
> 1.0.1e installed. But should you try to list them on machine with
> lower version - it will never mention you need 1.0.1e at all.
>
Right - therein would appear to lie the problem. Using EC2 again:
$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)
$ yum --disablerepo="*" --enablerepo=pgdg92 deplist
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
Unsatisfied dependency <========================
...
Which is exactly your problem, you need access to the repos [1] (or you
need to mirror them), since everything is fine in that case:
$ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
provider: openssl.x86_64 1.0.1e-15.el6
provider: openssl.x86_64 1.0.1e-16.el6_5
...
I don't know if it is feasible/possible/legal to mirror Redhat repos
(I'm merely messing with Redhat to help you - I normally use Ubuntu).
I would suggest that if you are avoiding use of the repos because of
lack of subscription then moving to Centos would make sense - these days
running a Linux distribution *without* access to updates etc is really
not a great idea!
Cheers
Mark
[1] specifically: rhui-REGION-rhel-server-releases
On 07/12/13 17:01, Mark Kirkwood wrote:
>
> [1] specifically: rhui-REGION-rhel-server-releases
>
>
Just to make it glaringly obvious:
$ yum install postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
installed
--> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Running transaction check
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution
Dependencies Resolved
================================================================================
Package Arch Version Repository
Size
================================================================================
Installing:
postgresql92-server x86_64 9.2.6-1PGDG.rhel6 pgdg92
3.8 M
Installing for dependencies:
postgresql92 x86_64 9.2.6-1PGDG.rhel6 pgdg92
971 k
postgresql92-libs x86_64 9.2.6-1PGDG.rhel6 pgdg92
187 k
Updating for dependencies:
openssl x86_64 1.0.1e-16.el6_5
rhui-REGION-rhel-server-releases
1.5 M
Transaction Summary
================================================================================
Install 3 Package(s)
Upgrade 1 Package(s)
Total download size: 6.5 M
Is this ok [y/N]:
Having the exact same issue in CentOS 6.4. CentOS 6.4 x86_64 Update tree provides: openssl-1.0.0-27.el6_4.2.x86_64 which provides libssl.so.10()(64bit) and libcrypto.so.10()(64bit) CentOS 6.5 x86_64 Update tree provides: openssl-1.0.1e-16.el6_5.1.x86_64 which provides Installed fresh copy of CentOS 6.4 and applied all updates within the 6.4 tree. Installed the PostgreSQL 9.2 Repository from the following URL, with the assumption that it would essentially stay 'pinned' and work within the 6.4 tree: yum install http://yum.postgresql.org/9.2/redhat/rhel-6.4-x86_64/pgdg-centos92-9.2-6.noarch.rpm OS is 'pinned' to CentOS 6.4 so that updates are limited within the point release branch. Upgrades/Updates to next point release branch are not performed until that Branch has been vetted internally. This is a somewhat typical practice in many corporate environments as the server is not accessible externally, and predictability of the environment is required for steady state operations. Changes must be understood, vetted, and documented prior to release for operation. We absolutely appreciate these pre-compiled RPMs. It may be helpful to call out on the website that they are intended to be used with a system similar to the original RPM build environment, and then call out the specifics of that environment. If the build environment is in flux, or not fully documented for consumers of the service, then there may be a stronger chance of running into undocumented dependency issues such as these. The Fedora and EPEL environments are great examples of this. -- View this message in context: http://postgresql.1045698.n5.nabble.com/BUG-8659-Broken-dependencies-on-RHEL6-for-9-2-6-RPMs-tp5781988p5786279.html Sent from the PostgreSQL - bugs mailing list archive at Nabble.com.
Hi, On Fri, 2014-01-10 at 08:00 -0800, nodejkarabeg wrote: > Installed the PostgreSQL 9.2 Repository from the following URL, with > the assumption that it would essentially stay 'pinned' and work within > the 6.4 tree: > > yum install > http://yum.postgresql.org/9.2/redhat/rhel-6.4-x86_64/pgdg-centos92-9.2-6.noarch.rpm This is not a correct assumption: Actually the original directory name is rhel-6-86_64, and we create symlinks to each sub release, to match yum configurations on different servers. The policy is using the latest and greatest. Still, I would blame Red Hat for breaking something during an upgrade. Regards, -- Devrim GÜNDÜZ Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer Twitter: @DevrimGunduz , @DevrimGunduzTR