BUG #8659: Broken dependencies on RHEL6 for 9.2.6 RPMs

On 12/05/13 10:02, vitaly@tskhovrebov.ru wrote:

The following bug has been logged on the website:

Bug reference: 8659
Logged by: Vitaly Tskhovrebov
Email address: vitaly@tskhovrebov.ru
PostgreSQL version: 9.2.6
Operating system: RHEL6
Description:

Hello.

I have updated Redhat 6 machine with postgresql 9.2.2 installed from pgdg92
repo.

My update attempts fails with errors in dependency resolution, complaining
about libcrypto and libssl availability. However, here's what I found out:

yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: check_update, downloadonly, priorities, product-id,
security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
Unsatisfied dependency

dependency: libssl.so.10()(64bit)
provider: openssl.x86_64 1.0.0-27.el6_4.2
provider: openssl.x86_64 1.0.0-20.el6_2.5
dependency: libcrypto.so.10(libcrypto.so.10)(64bit)
Unsatisfied dependency
dependency: libcrypto.so.10()(64bit)
provider: openssl.x86_64 1.0.0-27.el6_4.2
provider: openssl.x86_64 1.0.0-20.el6_2.5

Looks like libcrypto.so.10()(64bit) is available, but
libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not.

I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
Is it possible that your openssl is installed from some other repository than RHN?

sudo yum localinstall pgdg-centos92-9.2-6.noarch.rpm

[vagrant@jefftest ~]$ sudo yum install postgresql92-server
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.mirror.freedomvoice.com
* extras: mirror.raystedman.net
* updates: mirrors.kernel.org
pgdg92
| 2.8 kB 00:00
pgdg92/primary_db
| 149 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Running transaction check
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
--> Processing Dependency: openssl = 1.0.0-27.el6_4.2 for package:
openssl-devel-1.0.0-27.el6_4.2.x86_64
---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package openssl-devel.x86_64 0:1.0.0-27.el6_4.2 will be updated
---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k
Updating for dependencies:
openssl
x86_64
1.0.1e-16.el6_5
updates 1.5 M
openssl-devel
x86_64
1.0.1e-16.el6_5
updates 1.2 M

Transaction Summary
=============================================================================================================================================================================================
Install 3 Package(s)
Upgrade 2 Package(s)

Total download size: 7.6 M
Is this ok [y/N]: y
Downloading Packages:
(1/5):
openssl-1.0.1e-16.el6_5.x86_64.rpm
| 1.5 MB 00:00
(2/5):
openssl-devel-1.0.1e-16.el6_5.x86_64.rpm
| 1.2 MB 00:00
(3/5):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(4/5):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(5/5):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:01
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
2.3 MB/s | 7.6 MB 00:03
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Updating :
openssl-1.0.1e-16.el6_5.x86_64
1/7
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
3/7
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Updating :
openssl-devel-1.0.1e-16.el6_5.x86_64
5/7
Cleanup :
openssl-devel-1.0.0-27.el6_4.2.x86_64
6/7
Cleanup :
openssl-1.0.0-27.el6_4.2.x86_64
7/7
Verifying :
openssl-devel-1.0.1e-16.el6_5.x86_64
1/7
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Verifying :
openssl-1.0.1e-16.el6_5.x86_64
3/7
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
5/7
Verifying :
openssl-1.0.0-27.el6_4.2.x86_64
6/7
Verifying :
openssl-devel-1.0.0-27.el6_4.2.x86_64
7/7

Installed:
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Updated:
openssl.x86_64
0:1.0.1e-16.el6_5
openssl-devel.x86_64
0:1.0.1e-16.el6_5

Complete!

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

Ok, Redhat is in question. I understand the similarities with Centos, but
still.

I repeated process using very fresh install of redhat just specially for
this and was able to reproduce the issue.

On Thu, Dec 5, 2013 at 3:30 PM, Jeff Frost <jeff@pgexperts.com> wrote:

By the way, openssl 1.0.1e is not available for redhat 6 yet.

On 12/05/13 12:42, Vitaly Tskhovrebov wrote:

Ok, Redhat is in question. I understand the similarities with Centos, but
still.

I repeated process using very fresh install of redhat just specially for
this and was able to reproduce the issue.

I also just tested it successfully on Scientific Linux 6. Unfortunately, I
don't have access to a RHEL6 server.

Is it possible that the RHN security/update repositories are disabled?

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

On 12/05/13 12:44, Vitaly Tskhovrebov wrote:

By the way, openssl 1.0.1e is not available for redhat 6 yet.

Oh, interesting. Well, I just took a look at the spec file and we don't
specifically require 1.0.1e, it probably just gets baked in due to the build
process.

Can you try rebuilding from the source rpm on a RHEL6 host:

http://yum.postgresql.org/srpms/9.2/redhat/rhel-6-x86_64/repoview/postgresql92.html

--
Jeff Frost <jeff@pgexperts.com>
CTO, PostgreSQL Experts, Inc.
Phone: 1-888-PG-EXPRT x506
FAX: 415-762-5122
http://www.pgexperts.com/

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

On 12/05/13 12:44, Jeff Frost wrote:

On 12/05/13 12:42, Vitaly Tskhovrebov wrote:

Ok, Redhat is in question. I understand the similarities with Centos, but
still.

I repeated process using very fresh install of redhat just specially for
this and was able to reproduce the issue.

I also just tested it successfully on Scientific Linux 6. Unfortunately, I
don't have access to a RHEL6 server.

Is it possible that the RHN security/update repositories are disabled?

Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
fine. Also, it seems to have openssl-1.0.1e already:

$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)

yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm

yum install postgresql92-server postgresql92-contrib
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6 for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-contrib
x86_64
9.2.6-1PGDG.rhel6
pgdg92 436 k
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k

Transaction Summary
=============================================================================================================================================================================================
Install 4 Package(s)

Total download size: 5.4 M
Installed size: 23 M
Is this ok [y/N]: y
Downloading Packages:
(1/4):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(2/4):
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
| 436 kB 00:00
(3/4):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(4/4):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
3.4 MB/s | 5.4 MB 00:01
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
1/4
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
2/4
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Installing :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
1/4
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/4
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Verifying :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4

Installed:
postgresql92-contrib.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6

rpm -qa |grep openssl
openssl-1.0.1e-16.el6_5.x86_64
openssl-devel-1.0.1e-16.el6_5.x86_64

yum info openssl
Loaded plugins: amazon-id, rhui-lb, security
Installed Packages
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5
Size : 4.0 M
Repo : installed
From repo : rhui-REGION-rhel-server-releases
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
between
: machines. OpenSSL includes a certificate management tool and shared
: libraries which provide various cryptographic algorithms and
: protocols.

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

From what repo does this 101e come from?

On Thursday, December 5, 2013, Jeff Frost wrote:

It's in the yum info down below:

rhui-REGION-rhel-server-releases

which is defined as:

[rhui-REGION-rhel-server-releases]
name=Red Hat Enterprise Linux Server 6 (RPMs)
mirrorlist=https://rhui2-cds01.REGION.aws.ce.redhat.com/pulp/mirror/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
sslverify=1
sslclientkey=/etc/pki/rhui/content-rhel6.key
sslclientcert=/etc/pki/rhui/product/content-rhel6.crt
sslcacert=/etc/pki/rhui/cdn.redhat.com-chain.crt

On 12/05/13 14:34, Vitaly Tskhovrebov wrote:

From what repo does this 101e come from?

On Thursday, December 5, 2013, Jeff Frost wrote:

On 12/05/13 12:44, Jeff Frost wrote:

On 12/05/13 12:42, Vitaly Tskhovrebov wrote:

Ok, Redhat is in question. I understand the similarities with Centos, but
still.

I repeated process using very fresh install of redhat just specially for
this and was able to reproduce the issue.

I also just tested it successfully on Scientific Linux 6. Unfortunately, I
don't have access to a RHEL6 server.

Is it possible that the RHN security/update repositories are disabled?

Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
fine. Also, it seems to have openssl-1.0.1e already:

$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)

yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm

yum install postgresql92-server postgresql92-contrib
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be
installed
--> Processing Dependency: postgresql92 = 9.2.6 for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
installed
--> Running transaction check
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-contrib
x86_64
9.2.6-1PGDG.rhel6
pgdg92 436 k
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k

Transaction Summary
=============================================================================================================================================================================================
Install 4 Package(s)

Total download size: 5.4 M
Installed size: 23 M
Is this ok [y/N]: y
Downloading Packages:
(1/4):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(2/4):
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
| 436 kB 00:00
(3/4):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(4/4):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
3.4 MB/s | 5.4 MB 00:01
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
1/4
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
2/4
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Installing :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
1/4
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/4
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Verifying :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4

Installed:
postgresql92-contrib.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6

rpm -qa |grep openssl
openssl-1.0.1e-16.el6_5.x86_64
openssl-devel-1.0.1e-16.el6_5.x86_64

yum info openssl
Loaded plugins: amazon-id, rhui-lb, security
Installed Packages
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5
Size : 4.0 M
Repo : installed
From repo : rhui-REGION-rhel-server-releases
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
between
: machines. OpenSSL includes a certificate management tool
and shared
: libraries which provide various cryptographic algorithms and
: protocols.

--
Jeff Frost <jeff@pgexperts.com>
CTO, PostgreSQL Experts, Inc.
Phone: 1-888-PG-EXPRT x506
FAX: 415-762-5122
http://www.pgexperts.com/

Vitaly Tskhovrebov <vitaly@tskhovrebov.ru> writes:

By the way, openssl 1.0.1e is not available for redhat 6 yet.

You are mistaken. On my RHEL6 machine I see

$ rpm -qa | grep openssl
openssl-devel-1.0.1e-16.el6_5.x86_64
openssl-1.0.1e-16.el6_5.x86_64

A quick look in yum.log says it was updated a couple weeks ago:

Jul 21 14:26:18 Updated: openssl-1.0.0-27.el6_4.2.x86_64
Jul 21 14:27:18 Updated: openssl-devel-1.0.0-27.el6_4.2.x86_64
Nov 21 10:42:01 Updated: openssl-1.0.1e-16.el6_5.x86_64
Nov 21 10:46:30 Updated: openssl-devel-1.0.1e-16.el6_5.x86_64

regards, tom lane

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

On 12/5/2013 12:30 PM, Jeff Frost wrote:

I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
Is it possible that your openssl is installed from some other repository than RHN?

I tested much the same, with a not-quite-fresh c6.4 host that had been
yum updated shortly /before/ CentOS 6.5 was released, I yum installed
postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
this is a RHEL specific issue somehow ?

--
john r pierce 37N 122W
somewhere on the middle of the left coast

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce@hogranch.com> wrote:

On 12/5/2013 12:30 PM, Jeff Frost wrote:

I just tested it on a freshly installed CentOS 6.4 host and it worked
fine.
Is it possible that your openssl is installed from some other repository
than RHN?

I tested much the same, with a not-quite-fresh c6.4 host that had been yum
updated shortly /before/ CentOS 6.5 was released, I yum installed
postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
this is a RHEL specific issue somehow ?

I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
without doing any updates at all from the repositories before trying. This
machine does not currently have any subscription at all, so it's the fresh
RHEL 6.4, and postgres does not install.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

On Fri, Dec 6, 2013 at 9:14 AM, Magnus Hagander <magnus@hagander.net> wrote:

On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce@hogranch.com>wrote:

On 12/5/2013 12:30 PM, Jeff Frost wrote:

I just tested it on a freshly installed CentOS 6.4 host and it worked
fine.
Is it possible that your openssl is installed from some other repository
than RHN?

I tested much the same, with a not-quite-fresh c6.4 host that had been
yum updated shortly /before/ CentOS 6.5 was released, I yum installed
postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
this is a RHEL specific issue somehow ?

I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
without doing any updates at all from the repositories before trying. This
machine does not currently have any subscription at all, so it's the fresh
RHEL 6.4, and postgres does not install.

I should add - explicitly installing openssl's latest version (with just
yum install openssl *instead of* yum update), made PostgreSQL work.

I think that basically says you need openssl from 6.5 to make it work. But
you don't need a full update to 6.5. I think that dependency should sitll
be fixed.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

On 12/6/2013 12:14 AM, Magnus Hagander wrote:

I can confirm that this breaks on a freshly installed RHEL 6.4, from
iso, without doing any updates at all from the repositories before
trying. This machine does not currently have any subscription at all,
so it's the fresh RHEL 6.4, and postgres does not install.

redhat without a subscription, yum can't access any dependencies since
you have no access to the redhat network.

centos doesn't have this problem :)

--
john r pierce 37N 122W
somewhere on the middle of the left coast

On Dec 6, 2013 10:11 AM, "John R Pierce" <pierce@hogranch.com> wrote:

On 12/6/2013 12:14 AM, Magnus Hagander wrote:

I can confirm that this breaks on a freshly installed RHEL 6.4, from

iso, without doing any updates at all from the repositories before trying.
This machine does not currently have any subscription at all, so it's the
fresh RHEL 6.4, and postgres does not install.

redhat without a subscription, yum can't access any dependencies since

you have no access to the redhat network.

Of course. I know this, and did that intentionally to provoke the problem.
The problem persists once you enable the subscription, unless you also
upgrade at that time. However, if you enable the subscription first I bet
it pulls down the 6.5 version automatically. Which is why the problem
doesn't show up on a freshly installed box, only on those that already
existed but weren't upgraded.

/Magnus

My question is: if 9.2.6 doesn't explicitly use features of openssl
1.0.1, why limit the package to work with this version only? Why
openssl 1.0.0 is no good?

Despite of the fact that I was mistaken of availability of fresh
openssl package, the situation doesn't make sense to me.

--
Vitaly Tskhovrebov
+1 (914) 433-7683

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

Magnus Hagander <magnus@hagander.net> writes:

I think that basically says you need openssl from 6.5 to make it work. But
you don't need a full update to 6.5. I think that dependency should sitll
be fixed.

Essentially, you're asking Devrim to downgrade his build box to a known
insecure version of OpenSSL. I won't be surprised if his answer isn't
printable. It almost certainly won't be "okay".

(And no, I don't have a lot of sympathy for people running RHEL without
a subscription.)

regards, tom lane

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs

On Fri, Dec 6, 2013 at 3:44 PM, Tom Lane <tgl@sss.pgh.pa.us> wrote:

Magnus Hagander <magnus@hagander.net> writes:

I think that basically says you need openssl from 6.5 to make it work.

But

you don't need a full update to 6.5. I think that dependency should sitll
be fixed.

Essentially, you're asking Devrim to downgrade his build box to a known
insecure version of OpenSSL. I won't be surprised if his answer isn't
printable. It almost certainly won't be "okay".

No, I'm not. But that's maybe because I don't know how those things are set
up.

What I'm asking for is the 9.2 postgresql packages to depend on a version
of openssl that's present in 6.4. If the user is on 6.5, it will still
match, and not be a problem.

I don't know how it works in the RedHat world, but in debian that would
just be a "depend on openssl version x.y.z or higher". I can't believe
that's too hard.

(And no, I don't have a lot of sympathy for people running RHEL without
a subscription.)

That's not the usecase I care about. I don't have any sympathy for those
either.

I'm talking about the people who have not yet upgraded to 6.5, since it was
only released two weeks ago. You know, kind of like how we still support
9.2 even though 9.3 was released months ago. But those people can no longer
upgrade PostgreSQL to a release that doesn't contain known dataloss bugs.

(Actually they can, by manually installing openssl from 6.5 first - but
that's really more of a workaround than a fix)

It might be that it's too much work to deal with something like that. I
just wanted it to be properly investigate that this really is that case. It
just seems to be that it *should* be an easy fix, but maybe it's not.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

Despite of sympathy on subscription basis:

I either should be allowed to build my own postgres from srpm, and
uuid-devel dependency should be resolvable,

Or there should be a really strong reason to use 1.0.1e instead of 1.0.0,
other than downgrading a box. Basically, 1.0.0 isn't that insecure,
otherwise redhat would notify us on imminent threat.

There are tons of other situations available where redhat subscription will
not work that good, including production db zone without direct access of
internet resources. I would ask people not to come down this road and
concentrate on specific issue:

The bug is titled: broken dependency for rhel6. This because by dependency
definition package is fine with openssl version installed officially, but
somehow expects yum to figure out that Devrim will be happy should it use
another package version.

Magnus Hagander <magnus@hagander.net> writes:

What I'm asking for is the 9.2 postgresql packages to depend on a version
of openssl that's present in 6.4. If the user is on 6.5, it will still
match, and not be a problem.

I don't know how it works in the RedHat world, but in debian that would
just be a "depend on openssl version x.y.z or higher". I can't believe
that's too hard.

The dependency in question is one that's auto-generated during the package
build, so the only way Devrim could change this is by downgrading the
package he builds against.

Having said that, though, I'm pretty confused as to what's happening.
The original complaint claimed that libssl.so.10 and libcrypto.so.10
weren't present, but I see those both on my current machine and in
a backup from a couple months ago (when I still had
openssl-1.0.0-27.el6_4.2.x86_64 installed). So it's far from apparent
what it is that the PGDG RPM is depending on that wouldn't be there.

regards, tom lane

--
Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org)
To make changes to your subscription:
http://www.postgresql.org/mailpref/pgsql-bugs