Recently, we have installed yum from the AIX Toolbox (www.ibm.com/support/pages/aix-toolbox-linux-applications-overview) on some of our systems. So far, we have installed RPM packages from Perzl (www.perzl.org). When upgrading to yum, some RPMs were updated with versions from the AIX Toolbox. For some of the RPMs, there were problems with dynamic libraries afterwards.
Here we show one of the issues with the curl program:
$ curl exec(): 0509-036 Cannot load program curl because of the following errors: 0509-022 Cannot load module /opt/freeware/lib/libcurl.a(libcurl.so.4). 0509-150 Dependent module /opt/freeware/lib/libcrypto.a(libcrypto.so) could not be loaded. 0509-152 Member libcrypto.so is not found in archive 0509-022 Cannot load module curl. 0509-150 Dependent module /opt/freeware/lib/libcurl.a(libcurl.so.4) could not be loaded. 0509-022 Cannot load module . $
Curl was working before installing the RPM packages. The command ldd for listing dynamic dependencies provides a similar error message:
$ ldd /usr/bin/curl /usr/bin/curl needs: /usr/lib/libc.a(shr.o) /opt/freeware/lib/libcurl.a(libcurl.so.4) /opt/freeware/lib/libz.a(libz.so.1) /unix /usr/lib/libcrypt.a(shr.o) /opt/freeware/lib/libcrypto.a(libcrypto.so) ar: 0707-109 Member name libcrypto.so does not exist. dump: /tmp/tmpdir31457524/extract/libcrypto.so: 0654-106 Cannot open the specified file. /opt/freeware/lib/libssl.a(libssl.so) ar: 0707-109 Member name libssl.so does not exist. dump: /tmp/tmpdir31457524/extract/libssl.so: 0654-106 Cannot open the specified file. $
The file /opt/freeware/lib/libcrypto.a is an archive and the error message says that the shared object libcrypto.so does not exist in this archive. This can easily be checked using the command ar:
$ ar -X any tv /opt/freeware/lib/libcrypto.a rwxr-xr-x 0/0 3036810 Apr 08 18:46 2014 libcrypto.so.1.0.1 rwxr-xr-x 0/0 3510308 Apr 08 18:41 2014 libcrypto.so.1.0.1 rw-r--r-- 0/0 2012251 Apr 08 18:46 2014 libcrypto.so.0.9.7 rw-r--r-- 0/0 2491620 Apr 08 18:46 2014 libcrypto.so.0.9.8 rwxr-xr-x 0/0 2921492 Apr 08 18:46 2014 libcrypto.so.1.0.0 rw-r--r-- 0/0 2382757 Apr 08 18:46 2014 libcrypto.so.0.9.7 rw-r--r-- 0/0 2923920 Apr 08 18:46 2014 libcrypto.so.0.9.8 rwxr-xr-x 0/0 3381316 Apr 08 18:46 2014 libcrypto.so.1.0.0 $
(The option “-X any” ensures that both 32– and 64-bit objects are displayed)
The shared library libcrypto.so is obviously not in the archive! The archive is part of Perzl’s OpenSSL package:
$ rpm -qf /opt/freeware/lib/libcrypto.a openssl-1.0.1g-1.ppc $
The OpenSSL package is the cause of the problems when calling curl and possibly other programs. Perzl’s packages have an OpenSSL package, which provides OpenSSL at /opt/freeware. The IBM packages from the AIX Toolbox, however, use the operating system’s OpenSSL under /usr/lib. There is no OpenSSL RPM package in the AIX Toolbox. Perzl’s OpenSSL package should be removed.
# rpm –e openssl #
Of course, if you have RPM packages (Perzl) that depend on OpenSSL, removing the OpenSSL RPM will fail:
# rpm -e openssl error: Failed dependencies: openssl >= 0.9.8 is needed by (installed) openldap-2.4.23-0.3.ppc #
In this case, there are 2 options: either uninstall the dependent package as well, or update the package with a version from the AIX toolbox. Here we briefly show the second case:
# yum update openldap AIX_Toolbox | 2.9 kB 00:00:00 AIX_Toolbox_71 | 2.9 kB 00:00:00 AIX_Toolbox_noarch | 2.9 kB 00:00:00 Setting up Update Process Resolving Dependencies --> Running transaction check ---> Package openldap.ppc 0:2.4.23-0.3 will be updated ---> Package openldap.ppc 0:2.4.46-1 will be an update ... Is this ok [y/N]: y ... Updated: openldap.ppc 0:2.4.46-1 Complete! #
Afterwards, the OpenSSL RPM can be uninstalled:
# rpm -e openssl #
Now curl can be started again without a problem:
$ curl curl: try 'curl --help' or 'curl --manual' for more information $
Conclusion: When switching to the AIX Toolbox, any existing OpenSSL RPM should be uninstalled!