[SOLVED] OPSI Dienste starten nach Update nicht mehr

Antworten
Mike1987
Beiträge: 177
Registriert: 08 Dez 2010, 08:30

[SOLVED] OPSI Dienste starten nach Update nicht mehr

Beitrag von Mike1987 »

Habe gerade mein System upgedatet:

Code: Alles auswählen

ii  opsi-atftp                           0.7.dfsg-7                           amd64        advanced TFTP client
ii  opsi-atftpd                          0.7.dfsg-7                           amd64        advanced TFTP server - opsi version with pcre, fifo and max-blksize patches
ii  opsi-configed                        4.0.7.5.22-2                         all          OPSI config editor
ii  opsi-depotserver                     4.0.7.3-1                            all          opsi depotserver configuration package
ii  opsi-linux-bootimage                 20170720-1                           amd64        opsi bootimage for netboot tasks.
ii  opsi-nagios-plugins                  4.0.7.3-1                            all          opsi nagios plugins
ii  opsi-utils                           4.0.7.17-2                           all          utilites for working with opsi.
ii  opsiconfd                            4.0.7.13-1                           all          opsi configuration service
ii  opsipxeconfd                         4.0.7.8-3                            all          opsi pxe configuration daemon
ii  python-opsi                          4.0.7.45-3                           all          opsi python library


und jetzt starten die Dienste nicht mehr. Weder opsiconfd, noch opsipxeconfd usw...

Der Ooutput sieht folgender maßen aus:

Code: Alles auswählen

opsiserver1:~ # /etc/init.d/opsiconfd start
Starting opsi config service..Traceback (most recent call last):
  File "/usr/bin/opsiconfd", line 12, in <module>
    from opsiconfd.opsiconfd import main
  File "/usr/lib/python2.7/dist-packages/opsiconfd/opsiconfd.py", line 53, in <module>
    from twisted.internet import epollreactor
  File "/usr/lib/python2.7/dist-packages/twisted/internet/epollreactor.py", line 24, in <module>
    from twisted.internet import posixbase
  File "/usr/lib/python2.7/dist-packages/twisted/internet/posixbase.py", line 24, in <module>
    from twisted.internet import error, udp, tcp
  File "/usr/lib/python2.7/dist-packages/twisted/internet/tcp.py", line 29, in <module>
    from twisted.internet._newtls import (
  File "/usr/lib/python2.7/dist-packages/twisted/internet/_newtls.py", line 21, in <module>
    from twisted.protocols.tls import TLSMemoryBIOFactory, TLSMemoryBIOProtocol
  File "/usr/lib/python2.7/dist-packages/twisted/protocols/tls.py", line 41, in <module>
    from OpenSSL.SSL import Error, ZeroReturnError, WantReadError
  File "/usr/lib/python2.7/dist-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import rand, crypto, SSL
  File "/usr/lib/python2.7/dist-packages/OpenSSL/rand.py", line 11, in <module>
    from OpenSSL._util import (
  File "/usr/lib/python2.7/dist-packages/OpenSSL/_util.py", line 4, in <module>
    binding = Binding()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 89, in __init__
    self._ensure_ffi_initialized()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 113, in _ensure_ffi_initialized
    libraries=libraries,
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/utils.py", line 80, in build_ffi
    extra_link_args=extra_link_args,
  File "/usr/lib/python2.7/dist-packages/cffi/api.py", line 340, in verify
    lib = self.verifier.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 75, in load_library
    return self._load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 151, in _load_library
    return self._vengine.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/vengine_cpy.py", line 149, in load_library
    raise ffiplatform.VerificationError(error)
cffi.ffiplatform.VerificationError: importing '/usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so': /usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so: symbol SSLv2_client_method, version OPENSSL_1.0.0 not defined in file libssl.so.1.0.0 with link time reference
..........   (failed).
Das System ist ein Debian.
Hat einer ähnliche Probleme oder kennt die Lösung?!
Zuletzt geändert von Mike1987 am 01 Sep 2017, 14:44, insgesamt 1-mal geändert.
Nach oben
thomas.besser
Beiträge: 461
Registriert: 09 Sep 2009, 09:40

Re: OPSI Dienste starten nach Update nicht mehr

Beitrag von thomas.besser »

Mike1987 hat geschrieben: Das System ist ein Debian.
Und welche Version von Debian?
Nach oben
Mike1987
Beiträge: 177
Registriert: 08 Dez 2010, 08:30

Re: OPSI Dienste starten nach Update nicht mehr

Beitrag von Mike1987 »

thomas.besser hat geschrieben:
Mike1987 hat geschrieben: Das System ist ein Debian.
Und welche Version von Debian?
Debian Jessie
Nach oben
Benutzeravatar
ngbr
Ex-uib-Team
Beiträge: 130
Registriert: 27 Sep 2010, 11:41

Re: OPSI Dienste starten nach Update nicht mehr

Beitrag von ngbr »

Hi Mike1987,

das ist sehr ungewöhnlich. Gab es Fehler beim Update ?
sieht irgendwie danach aus, daß libssl nicht das macht, was es soll.
auf Jessie sollten diese hier draufsein

Code: Alles auswählen

ii  libssl0.9.8                       0.9.8o-4squeeze18                    amd64        SSL shared libraries
ii  libssl1.0.0:amd64                 1.0.1t-1+deb8u6                      amd64        Secure Sockets Layer toolkit - shared libraries
im Grunde erstmal die üblichen Dinge tun
> opsi-admin --init-current-config
> opsi-set-rights

notfalls reboot. Zwar ungewöhnlich, aber irgendwas stimmt mit libssl.so.1.0.0 nicht ..

Gab es Anpassungen am Zertifikat ?
---
hoping to help :)

if your problem was solved, pls mark this thread as 'SOLVED'. thank you .

-- no PN support --

Andre
Nach oben
Mike1987
Beiträge: 177
Registriert: 08 Dez 2010, 08:30

Re: OPSI Dienste starten nach Update nicht mehr

Beitrag von Mike1987 »

Hallo ngbr,

also die beiden Befehle hab ich auch gerade laufen lassen. Das Ergebnis ist das selbe :-(

Code: Alles auswählen

opsiserver1:/home/opsiproducts # opsi-admin --init-current-config
Traceback (most recent call last):
  File "/usr/bin/opsi-admin", line 47, in <module>
    from OPSI.Backend.BackendManager import BackendManager
  File "/usr/lib/python2.7/dist-packages/OPSI/Backend/BackendManager.py", line 46, in <module>
    from OPSI.Backend.HostControl import HostControlBackend
  File "/usr/lib/python2.7/dist-packages/OPSI/Backend/HostControl.py", line 52, in <module>
    from OPSI.Util.HTTP import closingConnection, non_blocking_connect_https
  File "/usr/lib/python2.7/dist-packages/OPSI/Util/HTTP.py", line 60, in <module>
    from OpenSSL import crypto
  File "/usr/lib/python2.7/dist-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import rand, crypto, SSL
  File "/usr/lib/python2.7/dist-packages/OpenSSL/rand.py", line 11, in <module>
    from OpenSSL._util import (
  File "/usr/lib/python2.7/dist-packages/OpenSSL/_util.py", line 4, in <module>
    binding = Binding()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 89, in __init__
    self._ensure_ffi_initialized()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 113, in _ensure_ffi_initialized
    libraries=libraries,
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/utils.py", line 80, in build_ffi
    extra_link_args=extra_link_args,
  File "/usr/lib/python2.7/dist-packages/cffi/api.py", line 340, in verify
    lib = self.verifier.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 75, in load_library
    return self._load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 151, in _load_library
    return self._vengine.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/vengine_cpy.py", line 149, in load_library
    raise ffiplatform.VerificationError(error)
cffi.ffiplatform.VerificationError: importing '/usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so': /usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so: symbol SSLv2_client_method, version OPENSSL_1.0.0 not defined in file libssl.so.1.0.0 with link time reference
[1]
opsiserver1:/home/opsiproducts # opsi-set-rights
Traceback (most recent call last):
  File "/usr/bin/opsi-setup", line 24, in <module>
    from OPSI.Backend.JSONRPC import JSONRPCBackend
  File "/usr/lib/python2.7/dist-packages/OPSI/Backend/JSONRPC.py", line 51, in <module>
    from OPSI.Util.HTTP import urlsplit, getSharedConnectionPool, deflateEncode, deflateDecode, gzipDecode
  File "/usr/lib/python2.7/dist-packages/OPSI/Util/HTTP.py", line 60, in <module>
    from OpenSSL import crypto
  File "/usr/lib/python2.7/dist-packages/OpenSSL/__init__.py", line 8, in <module>
    from OpenSSL import rand, crypto, SSL
  File "/usr/lib/python2.7/dist-packages/OpenSSL/rand.py", line 11, in <module>
    from OpenSSL._util import (
  File "/usr/lib/python2.7/dist-packages/OpenSSL/_util.py", line 4, in <module>
    binding = Binding()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 89, in __init__
    self._ensure_ffi_initialized()
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/openssl/binding.py", line 113, in _ensure_ffi_initialized
    libraries=libraries,
  File "/usr/lib/python2.7/dist-packages/cryptography/hazmat/bindings/utils.py", line 80, in build_ffi
    extra_link_args=extra_link_args,
  File "/usr/lib/python2.7/dist-packages/cffi/api.py", line 340, in verify
    lib = self.verifier.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 75, in load_library
    return self._load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/verifier.py", line 151, in _load_library
    return self._vengine.load_library()
  File "/usr/lib/python2.7/dist-packages/cffi/vengine_cpy.py", line 149, in load_library
    raise ffiplatform.VerificationError(error)
cffi.ffiplatform.VerificationError: importing '/usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so': /usr/lib/python2.7/dist-packages/cryptography/_Cryptography_cffi_813c10e0x7adb75f8.x86_64-linux-gnu.so: symbol SSLv2_client_method, version OPENSSL_1.0.0 not defined in file libssl.so.1.0.0 with link time reference
Anpassungen am Zertifikat gab es nicht.
Auch die Updates liefen sauber durch.
Hatte die Updates per apt-get update, apt-get upgrade installiert und alles lief sauber durch.

Ich werde mal gucken ob ich meine libssl Pakete weg bekomme und die von dir genannten Versionen drauf.

Auf jedenfall schon mal vielen Dank für die Antwort.
Nach oben
Mike1987
Beiträge: 177
Registriert: 08 Dez 2010, 08:30

Re: [SOLVED] OPSI Dienste starten nach Update nicht mehr

Beitrag von Mike1987 »

Jetzt läuft er wieder. Die libssl Version musste angepasst werden:

Code: Alles auswählen

 objdump -T /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 | grep "SSLv2"
000000000002b810 g    DF .text	0000000000000008  OPENSSL_1.0.0 SSLv23_client_method
000000000002ac30 g    DF .text	0000000000000008  OPENSSL_1.0.0 SSLv23_method
000000000002ac80 g    DF .text	0000000000000008  OPENSSL_1.0.0 SSLv23_server_method

Code: Alles auswählen

pt-get update
apt-get install --only-upgrade libssl1.0.0=1.0.2l-1~bpo8+1

Code: Alles auswählen

# objdump -T /lib64/libssl.so.1.0.0|grep "SSLv2"
0000000000016840 g    DF .text	0000000000000003  Base        SSLv2_server_method
000000000002e1a0 g    DF .text	0000000000000008  Base        SSLv23_client_method
0000000000016820 g    DF .text	0000000000000003  Base        SSLv2_method
0000000000016830 g    DF .text	0000000000000003  Base        SSLv2_client_method
000000000002c690 g    DF .text	0000000000000008  Base        SSLv23_method
000000000002d330 g    DF .text	0000000000000008  Base        SSLv23_server_method
# rpm -qf /lib64/libssl.so.1.0.0
libopenssl1_0_0-1.0.2k-2.1.x86_64
Nach oben
Antworten

Zurück zu „Freier Support“