Re: BUG #8659: Broken dependencies on RHEL6 for 9.2.6 RPMs

The following bug has been logged on the website:

Bug reference: 8659
Logged by: Vitaly Tskhovrebov
Email address: vitaly(at)tskhovrebov(dot)ru
PostgreSQL version: 9.2.6
Operating system: RHEL6
Description:

Hello.

I have updated Redhat 6 machine with postgresql 9.2.2 installed from pgdg92
repo.

My update attempts fails with errors in dependency resolution, complaining
about libcrypto and libssl availability. However, here's what I found out:

yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: check_update, downloadonly, priorities, product-id,
security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
Unsatisfied dependency

dependency: libssl.so.10()(64bit)
provider: openssl.x86_64 1.0.0-27.el6_4.2
provider: openssl.x86_64 1.0.0-20.el6_2.5
dependency: libcrypto.so.10(libcrypto.so.10)(64bit)
Unsatisfied dependency
dependency: libcrypto.so.10()(64bit)
provider: openssl.x86_64 1.0.0-27.el6_4.2
provider: openssl.x86_64 1.0.0-20.el6_2.5

Looks like libcrypto.so.10()(64bit) is available, but
libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not.

Please advise.

Thanks.

On 12/05/13 10:02, vitaly(at)tskhovrebov(dot)ru wrote:
> The following bug has been logged on the website:
>
> Bug reference: 8659
> Logged by: Vitaly Tskhovrebov
> Email address: vitaly(at)tskhovrebov(dot)ru
> PostgreSQL version: 9.2.6
> Operating system: RHEL6
> Description:
>
> Hello.
>
>
> I have updated Redhat 6 machine with postgresql 9.2.2 installed from pgdg92
> repo.
>
>
> My update attempts fails with errors in dependency resolution, complaining
> about libcrypto and libssl availability. However, here's what I found out:
>
>
> yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> Loaded plugins: check_update, downloadonly, priorities, product-id,
> security
> Finding dependencies:
> package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
> dependency: libssl.so.10(libssl.so.10)(64bit)
> Unsatisfied dependency
>
>
> dependency: libssl.so.10()(64bit)
> provider: openssl.x86_64 1.0.0-27.el6_4.2
> provider: openssl.x86_64 1.0.0-20.el6_2.5
> dependency: libcrypto.so.10(libcrypto.so.10)(64bit)
> Unsatisfied dependency
> dependency: libcrypto.so.10()(64bit)
> provider: openssl.x86_64 1.0.0-27.el6_4.2
> provider: openssl.x86_64 1.0.0-20.el6_2.5
>
>
>
>
> Looks like libcrypto.so.10()(64bit) is available, but
> libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not.

I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
Is it possible that your openssl is installed from some other repository than RHN?

sudo yum localinstall pgdg-centos92-9.2-6.noarch.rpm

[vagrant(at)jefftest ~]$ sudo yum install postgresql92-server
Loaded plugins: fastestmirror
Loading mirror speeds from cached hostfile
* base: centos.mirror.freedomvoice.com
* extras: mirror.raystedman.net
* updates: mirrors.kernel.org
pgdg92
| 2.8 kB 00:00
pgdg92/primary_db
| 149 kB 00:00
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Running transaction check
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
--> Processing Dependency: openssl = 1.0.0-27.el6_4.2 for package:
openssl-devel-1.0.0-27.el6_4.2.x86_64
---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package openssl-devel.x86_64 0:1.0.0-27.el6_4.2 will be updated
---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5 will be an update
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k
Updating for dependencies:
openssl
x86_64
1.0.1e-16.el6_5
updates 1.5 M
openssl-devel
x86_64
1.0.1e-16.el6_5
updates 1.2 M

Transaction Summary
=============================================================================================================================================================================================
Install 3 Package(s)
Upgrade 2 Package(s)

Total download size: 7.6 M
Is this ok [y/N]: y
Downloading Packages:
(1/5):
openssl-1.0.1e-16.el6_5.x86_64.rpm
| 1.5 MB 00:00
(2/5):
openssl-devel-1.0.1e-16.el6_5.x86_64.rpm
| 1.2 MB 00:00
(3/5):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(4/5):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(5/5):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:01
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
2.3 MB/s | 7.6 MB 00:03
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Updating :
openssl-1.0.1e-16.el6_5.x86_64
1/7
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
3/7
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Updating :
openssl-devel-1.0.1e-16.el6_5.x86_64
5/7
Cleanup :
openssl-devel-1.0.0-27.el6_4.2.x86_64
6/7
Cleanup :
openssl-1.0.0-27.el6_4.2.x86_64
7/7
Verifying :
openssl-devel-1.0.1e-16.el6_5.x86_64
1/7
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/7
Verifying :
openssl-1.0.1e-16.el6_5.x86_64
3/7
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
4/7
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
5/7
Verifying :
openssl-1.0.0-27.el6_4.2.x86_64
6/7
Verifying :
openssl-devel-1.0.0-27.el6_4.2.x86_64
7/7

Installed:
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Updated:
openssl.x86_64
0:1.0.1e-16.el6_5
openssl-devel.x86_64
0:1.0.1e-16.el6_5

Complete!

Ok, Redhat is in question. I understand the similarities with Centos, but
still.

I repeated process using very fresh install of redhat just specially for
this and was able to reproduce the issue.

On Thu, Dec 5, 2013 at 3:30 PM, Jeff Frost <jeff(at)pgexperts(dot)com> wrote:

> On 12/05/13 10:02, vitaly(at)tskhovrebov(dot)ru wrote:
> > The following bug has been logged on the website:
> >
> > Bug reference: 8659
> > Logged by: Vitaly Tskhovrebov
> > Email address: vitaly(at)tskhovrebov(dot)ru
> > PostgreSQL version: 9.2.6
> > Operating system: RHEL6
> > Description:
> >
> > Hello.
> >
> >
> > I have updated Redhat 6 machine with postgresql 9.2.2 installed from
> pgdg92
> > repo.
> >
> >
> > My update attempts fails with errors in dependency resolution,
> complaining
> > about libcrypto and libssl availability. However, here's what I found
> out:
> >
> >
> > yum deplist --enablerepo=pg92
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> > Loaded plugins: check_update, downloadonly, priorities, product-id,
> > security
> > Finding dependencies:
> > package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
> > dependency: libssl.so.10(libssl.so.10)(64bit)
> > Unsatisfied dependency
> >
> >
> > dependency: libssl.so.10()(64bit)
> > provider: openssl.x86_64 1.0.0-27.el6_4.2
> > provider: openssl.x86_64 1.0.0-20.el6_2.5
> > dependency: libcrypto.so.10(libcrypto.so.10)(64bit)
> > Unsatisfied dependency
> > dependency: libcrypto.so.10()(64bit)
> > provider: openssl.x86_64 1.0.0-27.el6_4.2
> > provider: openssl.x86_64 1.0.0-20.el6_2.5
> >
> >
> >
> >
> > Looks like libcrypto.so.10()(64bit) is available, but
> > libcrypto.so.10(libcrypto.so.10)(64bit) in the same time is not.
>
> I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
> Is it possible that your openssl is installed from some other repository
> than RHN?
>
> sudo yum localinstall pgdg-centos92-9.2-6.noarch.rpm
>
> [vagrant(at)jefftest ~]$ sudo yum install postgresql92-server
> Loaded plugins: fastestmirror
> Loading mirror speeds from cached hostfile
> * base: centos.mirror.freedomvoice.com
> * extras: mirror.raystedman.net
> * updates: mirrors.kernel.org
> pgdg92
> | 2.8 kB 00:00
> pgdg92/primary_db
> | 149 kB 00:00
> Setting up Install Process
> Resolving Dependencies
> --> Running transaction check
> ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
> installed
> --> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> --> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
> package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> --> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for package:
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> --> Processing Dependency: libpq.so.5()(64bit) for package:
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> --> Running transaction check
> ---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
> --> Processing Dependency: openssl = 1.0.0-27.el6_4.2 for package:
> openssl-devel-1.0.0-27.el6_4.2.x86_64
> ---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
> ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> --> Running transaction check
> ---> Package openssl-devel.x86_64 0:1.0.0-27.el6_4.2 will be updated
> ---> Package openssl-devel.x86_64 0:1.0.1e-16.el6_5 will be an update
> --> Finished Dependency Resolution
>
> Dependencies Resolved
>
>
> =============================================================================================================================================================================================
> Package
> Arch
> Version
> Repository Size
>
> =============================================================================================================================================================================================
> Installing:
> postgresql92-server
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 3.8 M
> Installing for dependencies:
> postgresql92
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 971 k
> postgresql92-libs
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 187 k
> Updating for dependencies:
> openssl
> x86_64
> 1.0.1e-16.el6_5
> updates 1.5 M
> openssl-devel
> x86_64
> 1.0.1e-16.el6_5
> updates 1.2 M
>
> Transaction Summary
>
> =============================================================================================================================================================================================
> Install 3 Package(s)
> Upgrade 2 Package(s)
>
> Total download size: 7.6 M
> Is this ok [y/N]: y
> Downloading Packages:
> (1/5):
> openssl-1.0.1e-16.el6_5.x86_64.rpm
> | 1.5 MB 00:00
> (2/5):
> openssl-devel-1.0.1e-16.el6_5.x86_64.rpm
> | 1.2 MB 00:00
> (3/5):
> postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 971 kB 00:00
> (4/5):
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 187 kB 00:00
> (5/5):
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 3.8 MB 00:01
>
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Total
> 2.3 MB/s | 7.6 MB 00:03
> Running rpm_check_debug
> Running Transaction Test
> Transaction Test Succeeded
> Running Transaction
> Updating :
> openssl-1.0.1e-16.el6_5.x86_64
> 1/7
> Installing :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 2/7
> Installing :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 3/7
> Installing :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 4/7
> Updating :
> openssl-devel-1.0.1e-16.el6_5.x86_64
> 5/7
> Cleanup :
> openssl-devel-1.0.0-27.el6_4.2.x86_64
> 6/7
> Cleanup :
> openssl-1.0.0-27.el6_4.2.x86_64
> 7/7
> Verifying :
> openssl-devel-1.0.1e-16.el6_5.x86_64
> 1/7
> Verifying :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 2/7
> Verifying :
> openssl-1.0.1e-16.el6_5.x86_64
> 3/7
> Verifying :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 4/7
> Verifying :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 5/7
> Verifying :
> openssl-1.0.0-27.el6_4.2.x86_64
> 6/7
> Verifying :
> openssl-devel-1.0.0-27.el6_4.2.x86_64
> 7/7
>
> Installed:
> postgresql92-server.x86_64
> 0:9.2.6-1PGDG.rhel6
>
>
> Dependency Installed:
> postgresql92.x86_64
> 0:9.2.6-1PGDG.rhel6
> postgresql92-libs.x86_64
> 0:9.2.6-1PGDG.rhel6
>
> Dependency Updated:
> openssl.x86_64
> 0:1.0.1e-16.el6_5
> openssl-devel.x86_64
> 0:1.0.1e-16.el6_5
>
> Complete!
>
>
>
>
>

By the way, openssl 1.0.1e is not available for redhat 6 yet.

On 12/05/13 12:42, Vitaly Tskhovrebov wrote:
> Ok, Redhat is in question. I understand the similarities with Centos, but
> still.
>
> I repeated process using very fresh install of redhat just specially for
> this and was able to reproduce the issue.

I also just tested it successfully on Scientific Linux 6. Unfortunately, I
don't have access to a RHEL6 server.

Is it possible that the RHN security/update repositories are disabled?

On 12/05/13 12:44, Vitaly Tskhovrebov wrote:
> By the way, openssl 1.0.1e is not available for redhat 6 yet.

Oh, interesting. Well, I just took a look at the spec file and we don't
specifically require 1.0.1e, it probably just gets baked in due to the build
process.

Can you try rebuilding from the source rpm on a RHEL6 host:

http://yum.postgresql.org/srpms/9.2/redhat/rhel-6-x86_64/repoview/postgresql92.html

--
Jeff Frost <jeff(at)pgexperts(dot)com>
CTO, PostgreSQL Experts, Inc.
Phone: 1-888-PG-EXPRT x506
FAX: 415-762-5122
http://www.pgexperts.com/

On 12/05/13 12:44, Jeff Frost wrote:
> On 12/05/13 12:42, Vitaly Tskhovrebov wrote:
>> Ok, Redhat is in question. I understand the similarities with Centos, but
>> still.
>>
>> I repeated process using very fresh install of redhat just specially for
>> this and was able to reproduce the issue.
> I also just tested it successfully on Scientific Linux 6. Unfortunately, I
> don't have access to a RHEL6 server.
>
>
> Is it possible that the RHN security/update repositories are disabled?
>
>
>
>

Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
fine. Also, it seems to have openssl-1.0.1e already:

$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)

yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm

yum install postgresql92-server postgresql92-contrib
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Processing Dependency: postgresql92 = 9.2.6 for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Running transaction check
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

=============================================================================================================================================================================================
Package
Arch
Version
Repository Size
=============================================================================================================================================================================================
Installing:
postgresql92-contrib
x86_64
9.2.6-1PGDG.rhel6
pgdg92 436 k
postgresql92-server
x86_64
9.2.6-1PGDG.rhel6
pgdg92 3.8 M
Installing for dependencies:
postgresql92
x86_64
9.2.6-1PGDG.rhel6
pgdg92 971 k
postgresql92-libs
x86_64
9.2.6-1PGDG.rhel6
pgdg92 187 k

Transaction Summary
=============================================================================================================================================================================================
Install 4 Package(s)

Total download size: 5.4 M
Installed size: 23 M
Is this ok [y/N]: y
Downloading Packages:
(1/4):
postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
| 971 kB 00:00
(2/4):
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
| 436 kB 00:00
(3/4):
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
| 187 kB 00:00
(4/4):
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
| 3.8 MB 00:00
---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Total
3.4 MB/s | 5.4 MB 00:01
Running rpm_check_debug
Running Transaction Test
Transaction Test Succeeded
Running Transaction
Installing :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
1/4
Installing :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
2/4
Installing :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Installing :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4
Verifying :
postgresql92-9.2.6-1PGDG.rhel6.x86_64
1/4
Verifying :
postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
2/4
Verifying :
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
3/4
Verifying :
postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
4/4

Installed:
postgresql92-contrib.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-server.x86_64
0:9.2.6-1PGDG.rhel6

Dependency Installed:
postgresql92.x86_64
0:9.2.6-1PGDG.rhel6
postgresql92-libs.x86_64
0:9.2.6-1PGDG.rhel6

rpm -qa |grep openssl
openssl-1.0.1e-16.el6_5.x86_64
openssl-devel-1.0.1e-16.el6_5.x86_64

yum info openssl
Loaded plugins: amazon-id, rhui-lb, security
Installed Packages
Name : openssl
Arch : x86_64
Version : 1.0.1e
Release : 16.el6_5
Size : 4.0 M
Repo : installed
From repo : rhui-REGION-rhel-server-releases
Summary : A general purpose cryptography library with TLS implementation
URL : http://www.openssl.org/
License : OpenSSL
Description : The OpenSSL toolkit provides support for secure communications
between
: machines. OpenSSL includes a certificate management tool and shared
: libraries which provide various cryptographic algorithms and
: protocols.

From what repo does this 101e come from?

On Thursday, December 5, 2013, Jeff Frost wrote:

> On 12/05/13 12:44, Jeff Frost wrote:
> > On 12/05/13 12:42, Vitaly Tskhovrebov wrote:
> >> Ok, Redhat is in question. I understand the similarities with Centos,
> but
> >> still.
> >>
> >> I repeated process using very fresh install of redhat just specially for
> >> this and was able to reproduce the issue.
> > I also just tested it successfully on Scientific Linux 6. Unfortunately,
> I
> > don't have access to a RHEL6 server.
> >
> >
> > Is it possible that the RHN security/update repositories are disabled?
> >
> >
> >
> >
>
> Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
> fine. Also, it seems to have openssl-1.0.1e already:
>
> $ cat /etc/redhat-release
> Red Hat Enterprise Linux Server release 6.4 (Santiago)
>
> yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm
>
> yum install postgresql92-server postgresql92-contrib
> Loaded plugins: amazon-id, rhui-lb, security
> Setting up Install Process
> Resolving Dependencies
> --> Running transaction check
> ---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be
> installed
> --> Processing Dependency: postgresql92 = 9.2.6 for package:
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> --> Processing Dependency: libpq.so.5()(64bit) for package:
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
> installed
> --> Running transaction check
> ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> --> Finished Dependency Resolution
>
> Dependencies Resolved
>
>
> =============================================================================================================================================================================================
> Package
> Arch
> Version
> Repository Size
>
> =============================================================================================================================================================================================
> Installing:
> postgresql92-contrib
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 436 k
> postgresql92-server
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 3.8 M
> Installing for dependencies:
> postgresql92
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 971 k
> postgresql92-libs
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 187 k
>
> Transaction Summary
>
> =============================================================================================================================================================================================
> Install 4 Package(s)
>
> Total download size: 5.4 M
> Installed size: 23 M
> Is this ok [y/N]: y
> Downloading Packages:
> (1/4):
> postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 971 kB 00:00
> (2/4):
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 436 kB 00:00
> (3/4):
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 187 kB 00:00
> (4/4):
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 3.8 MB 00:00
>
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Total
> 3.4 MB/s | 5.4 MB 00:01
> Running rpm_check_debug
> Running Transaction Test
> Transaction Test Succeeded
> Running Transaction
> Installing :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 1/4
> Installing :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 2/4
> Installing :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 3/4
> Installing :
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> 4/4
> Verifying :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 1/4
> Verifying :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 2/4
> Verifying :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 3/4
> Verifying :
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> 4/4
>
> Installed:
> postgresql92-contrib.x86_64
> 0:9.2.6-1PGDG.rhel6
> postgresql92-server.x86_64
> 0:9.2.6-1PGDG.rhel6
>
> Dependency Installed:
> postgresql92.x86_64
> 0:9.2.6-1PGDG.rhel6
> postgresql92-libs.x86_64
> 0:9.2.6-1PGDG.rhel6
>
>
> rpm -qa |grep openssl
> openssl-1.0.1e-16.el6_5.x86_64
> openssl-devel-1.0.1e-16.el6_5.x86_64
>
> yum info openssl
> Loaded plugins: amazon-id, rhui-lb, security
> Installed Packages
> Name : openssl
> Arch : x86_64
> Version : 1.0.1e
> Release : 16.el6_5
> Size : 4.0 M
> Repo : installed
> From repo : rhui-REGION-rhel-server-releases
> Summary : A general purpose cryptography library with TLS
> implementation
> URL : http://www.openssl.org/
> License : OpenSSL
> Description : The OpenSSL toolkit provides support for secure
> communications
> between
> : machines. OpenSSL includes a certificate management tool and
> shared
> : libraries which provide various cryptographic algorithms and
> : protocols.
>
>

It's in the yum info down below:

rhui-REGION-rhel-server-releases

which is defined as:

[rhui-REGION-rhel-server-releases]
name=Red Hat Enterprise Linux Server 6 (RPMs)
mirrorlist=https://rhui2-cds01.REGION.aws.ce.redhat.com/pulp/mirror/content/dist/rhel/rhui/server/6/$releasever/$basearch/os
enabled=1
gpgcheck=1
gpgkey=file:///etc/pki/rpm-gpg/RPM-GPG-KEY-redhat-release
sslverify=1
sslclientkey=/etc/pki/rhui/content-rhel6.key
sslclientcert=/etc/pki/rhui/product/content-rhel6.crt
sslcacert=/etc/pki/rhui/cdn.redhat.com-chain.crt

On 12/05/13 14:34, Vitaly Tskhovrebov wrote:
> From what repo does this 101e come from?
>
> On Thursday, December 5, 2013, Jeff Frost wrote:
>
> On 12/05/13 12:44, Jeff Frost wrote:
> > On 12/05/13 12:42, Vitaly Tskhovrebov wrote:
> >> Ok, Redhat is in question. I understand the similarities with Centos, but
> >> still.
> >>
> >> I repeated process using very fresh install of redhat just specially for
> >> this and was able to reproduce the issue.
> > I also just tested it successfully on Scientific Linux 6. Unfortunately, I
> > don't have access to a RHEL6 server.
> >
> >
> > Is it possible that the RHN security/update repositories are disabled?
> >
> >
> >
> >
>
> Huh, we just spun up a RHEL6.4 server on EC2 and everything installed just
> fine. Also, it seems to have openssl-1.0.1e already:
>
> $ cat /etc/redhat-release
> Red Hat Enterprise Linux Server release 6.4 (Santiago)
>
> yum localinstall --nogpg pgdg-redhat92-9.2-7.noarch.rpm
>
> yum install postgresql92-server postgresql92-contrib
> Loaded plugins: amazon-id, rhui-lb, security
> Setting up Install Process
> Resolving Dependencies
> --> Running transaction check
> ---> Package postgresql92-contrib.x86_64 0:9.2.6-1PGDG.rhel6 will be
> installed
> --> Processing Dependency: postgresql92 = 9.2.6 for package:
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> --> Processing Dependency: libpq.so.5()(64bit) for package:
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> ---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
> installed
> --> Running transaction check
> ---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> ---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
> --> Finished Dependency Resolution
>
> Dependencies Resolved
>
> =============================================================================================================================================================================================
> Package
> Arch
> Version
> Repository Size
> =============================================================================================================================================================================================
> Installing:
> postgresql92-contrib
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 436 k
> postgresql92-server
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 3.8 M
> Installing for dependencies:
> postgresql92
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 971 k
> postgresql92-libs
> x86_64
> 9.2.6-1PGDG.rhel6
> pgdg92 187 k
>
> Transaction Summary
> =============================================================================================================================================================================================
> Install 4 Package(s)
>
> Total download size: 5.4 M
> Installed size: 23 M
> Is this ok [y/N]: y
> Downloading Packages:
> (1/4):
> postgresql92-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 971 kB 00:00
> (2/4):
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 436 kB 00:00
> (3/4):
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 187 kB 00:00
> (4/4):
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64.rpm
> | 3.8 MB 00:00
> ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------
> Total
> 3.4 MB/s | 5.4 MB 00:01
> Running rpm_check_debug
> Running Transaction Test
> Transaction Test Succeeded
> Running Transaction
> Installing :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 1/4
> Installing :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 2/4
> Installing :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 3/4
> Installing :
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> 4/4
> Verifying :
> postgresql92-9.2.6-1PGDG.rhel6.x86_64
> 1/4
> Verifying :
> postgresql92-libs-9.2.6-1PGDG.rhel6.x86_64
> 2/4
> Verifying :
> postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> 3/4
> Verifying :
> postgresql92-contrib-9.2.6-1PGDG.rhel6.x86_64
> 4/4
>
> Installed:
> postgresql92-contrib.x86_64
> 0:9.2.6-1PGDG.rhel6
> postgresql92-server.x86_64
> 0:9.2.6-1PGDG.rhel6
>
> Dependency Installed:
> postgresql92.x86_64
> 0:9.2.6-1PGDG.rhel6
> postgresql92-libs.x86_64
> 0:9.2.6-1PGDG.rhel6
>
>
> rpm -qa |grep openssl
> openssl-1.0.1e-16.el6_5.x86_64
> openssl-devel-1.0.1e-16.el6_5.x86_64
>
> yum info openssl
> Loaded plugins: amazon-id, rhui-lb, security
> Installed Packages
> Name : openssl
> Arch : x86_64
> Version : 1.0.1e
> Release : 16.el6_5
> Size : 4.0 M
> Repo : installed
> From repo : rhui-REGION-rhel-server-releases
> Summary : A general purpose cryptography library with TLS implementation
> URL : http://www.openssl.org/
> License : OpenSSL
> Description : The OpenSSL toolkit provides support for secure communications
> between
> : machines. OpenSSL includes a certificate management tool
> and shared
> : libraries which provide various cryptographic algorithms and
> : protocols.
>

--
Jeff Frost <jeff(at)pgexperts(dot)com>
CTO, PostgreSQL Experts, Inc.
Phone: 1-888-PG-EXPRT x506
FAX: 415-762-5122
http://www.pgexperts.com/

Vitaly Tskhovrebov <vitaly(at)tskhovrebov(dot)ru> writes:
> By the way, openssl 1.0.1e is not available for redhat 6 yet.

You are mistaken. On my RHEL6 machine I see

$ rpm -qa | grep openssl
openssl-devel-1.0.1e-16.el6_5.x86_64
openssl-1.0.1e-16.el6_5.x86_64

A quick look in yum.log says it was updated a couple weeks ago:

Jul 21 14:26:18 Updated: openssl-1.0.0-27.el6_4.2.x86_64
Jul 21 14:27:18 Updated: openssl-devel-1.0.0-27.el6_4.2.x86_64
Nov 21 10:42:01 Updated: openssl-1.0.1e-16.el6_5.x86_64
Nov 21 10:46:30 Updated: openssl-devel-1.0.1e-16.el6_5.x86_64

regards, tom lane

On 12/5/2013 12:30 PM, Jeff Frost wrote:
> I just tested it on a freshly installed CentOS 6.4 host and it worked fine.
> Is it possible that your openssl is installed from some other repository than RHN?

I tested much the same, with a not-quite-fresh c6.4 host that had been
yum updated shortly /before/ CentOS 6.5 was released, I yum installed
postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
this is a RHEL specific issue somehow ?

--
john r pierce 37N 122W
somewhere on the middle of the left coast

On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce(at)hogranch(dot)com> wrote:

> On 12/5/2013 12:30 PM, Jeff Frost wrote:
>
>> I just tested it on a freshly installed CentOS 6.4 host and it worked
>> fine.
>> Is it possible that your openssl is installed from some other repository
>> than RHN?
>>
>
> I tested much the same, with a not-quite-fresh c6.4 host that had been yum
> updated shortly /before/ CentOS 6.5 was released, I yum installed
> postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
> this is a RHEL specific issue somehow ?
>
>
I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
without doing any updates at all from the repositories before trying. This
machine does not currently have any subscription at all, so it's the fresh
RHEL 6.4, and postgres does not install.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

On Fri, Dec 6, 2013 at 9:14 AM, Magnus Hagander <magnus(at)hagander(dot)net> wrote:

>
> On Fri, Dec 6, 2013 at 12:26 AM, John R Pierce <pierce(at)hogranch(dot)com>wrote:
>
>> On 12/5/2013 12:30 PM, Jeff Frost wrote:
>>
>>> I just tested it on a freshly installed CentOS 6.4 host and it worked
>>> fine.
>>> Is it possible that your openssl is installed from some other repository
>>> than RHN?
>>>
>>
>> I tested much the same, with a not-quite-fresh c6.4 host that had been
>> yum updated shortly /before/ CentOS 6.5 was released, I yum installed
>> postgresql92-{contrib,server,devel} without a hitch. I'm wondering if
>> this is a RHEL specific issue somehow ?
>>
>>
> I can confirm that this breaks on a freshly installed RHEL 6.4, from iso,
> without doing any updates at all from the repositories before trying. This
> machine does not currently have any subscription at all, so it's the fresh
> RHEL 6.4, and postgres does not install.
>
>
I should add - explicitly installing openssl's latest version (with just
yum install openssl *instead of* yum update), made PostgreSQL work.

I think that basically says you need openssl from 6.5 to make it work. But
you don't need a full update to 6.5. I think that dependency should sitll
be fixed.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

On 12/6/2013 12:14 AM, Magnus Hagander wrote:
>
>
>
> I can confirm that this breaks on a freshly installed RHEL 6.4, from
> iso, without doing any updates at all from the repositories before
> trying. This machine does not currently have any subscription at all,
> so it's the fresh RHEL 6.4, and postgres does not install.

redhat without a subscription, yum can't access any dependencies since
you have no access to the redhat network.

centos doesn't have this problem :)

--
john r pierce 37N 122W
somewhere on the middle of the left coast

On Dec 6, 2013 10:11 AM, "John R Pierce" <pierce(at)hogranch(dot)com> wrote:
>
> On 12/6/2013 12:14 AM, Magnus Hagander wrote:
>>>
>>>
>>
>> I can confirm that this breaks on a freshly installed RHEL 6.4, from
iso, without doing any updates at all from the repositories before trying.
This machine does not currently have any subscription at all, so it's the
fresh RHEL 6.4, and postgres does not install.
>
>
> redhat without a subscription, yum can't access any dependencies since
you have no access to the redhat network.

Of course. I know this, and did that intentionally to provoke the problem.
The problem persists once you enable the subscription, unless you also
upgrade at that time. However, if you enable the subscription first I bet
it pulls down the 6.5 version automatically. Which is why the problem
doesn't show up on a freshly installed box, only on those that already
existed but weren't upgraded.

/Magnus

My question is: if 9.2.6 doesn't explicitly use features of openssl
1.0.1, why limit the package to work with this version only? Why
openssl 1.0.0 is no good?

Despite of the fact that I was mistaken of availability of fresh
openssl package, the situation doesn't make sense to me.

--
Vitaly Tskhovrebov
+1 (914) 433-7683

Magnus Hagander <magnus(at)hagander(dot)net> writes:
> I think that basically says you need openssl from 6.5 to make it work. But
> you don't need a full update to 6.5. I think that dependency should sitll
> be fixed.

Essentially, you're asking Devrim to downgrade his build box to a known
insecure version of OpenSSL. I won't be surprised if his answer isn't
printable. It almost certainly won't be "okay".

(And no, I don't have a lot of sympathy for people running RHEL without
a subscription.)

regards, tom lane

On Fri, Dec 6, 2013 at 3:44 PM, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> wrote:

> Magnus Hagander <magnus(at)hagander(dot)net> writes:
> > I think that basically says you need openssl from 6.5 to make it work.
> But
> > you don't need a full update to 6.5. I think that dependency should sitll
> > be fixed.
>
> Essentially, you're asking Devrim to downgrade his build box to a known
> insecure version of OpenSSL. I won't be surprised if his answer isn't
> printable. It almost certainly won't be "okay".
>

No, I'm not. But that's maybe because I don't know how those things are set
up.

What I'm asking for is the 9.2 postgresql packages to depend on a version
of openssl that's present in 6.4. If the user is on 6.5, it will still
match, and not be a problem.

I don't know how it works in the RedHat world, but in debian that would
just be a "depend on openssl version x.y.z or higher". I can't believe
that's too hard.

> (And no, I don't have a lot of sympathy for people running RHEL without
> a subscription.)
>

That's not the usecase I care about. I don't have any sympathy for those
either.

I'm talking about the people who have not yet upgraded to 6.5, since it was
only released two weeks ago. You know, kind of like how we still support
9.2 even though 9.3 was released months ago. But those people can no longer
upgrade PostgreSQL to a release that doesn't contain known dataloss bugs.

(Actually they can, by manually installing openssl from 6.5 first - but
that's really more of a workaround than a fix)

It might be that it's too much work to deal with something like that. I
just wanted it to be properly investigate that this really is that case. It
just seems to be that it *should* be an easy fix, but maybe it's not.

--
Magnus Hagander
Me: http://www.hagander.net/
Work: http://www.redpill-linpro.com/

Despite of sympathy on subscription basis:

I either should be allowed to build my own postgres from srpm, and
uuid-devel dependency should be resolvable,

Or there should be a really strong reason to use 1.0.1e instead of 1.0.0,
other than downgrading a box. Basically, 1.0.0 isn't that insecure,
otherwise redhat would notify us on imminent threat.

There are tons of other situations available where redhat subscription will
not work that good, including production db zone without direct access of
internet resources. I would ask people not to come down this road and
concentrate on specific issue:

The bug is titled: broken dependency for rhel6. This because by dependency
definition package is fine with openssl version installed officially, but
somehow expects yum to figure out that Devrim will be happy should it use
another package version.

Magnus Hagander <magnus(at)hagander(dot)net> writes:
> What I'm asking for is the 9.2 postgresql packages to depend on a version
> of openssl that's present in 6.4. If the user is on 6.5, it will still
> match, and not be a problem.

> I don't know how it works in the RedHat world, but in debian that would
> just be a "depend on openssl version x.y.z or higher". I can't believe
> that's too hard.

The dependency in question is one that's auto-generated during the package
build, so the only way Devrim could change this is by downgrading the
package he builds against.

Having said that, though, I'm pretty confused as to what's happening.
The original complaint claimed that libssl.so.10 and libcrypto.so.10
weren't present, but I see those both on my current machine and in
a backup from a couple months ago (when I still had
openssl-1.0.0-27.el6_4.2.x86_64 installed). So it's far from apparent
what it is that the PGDG RPM is depending on that wouldn't be there.

regards, tom lane

Hi,

On Fri, 2013-12-06 at 09:44 -0500, Tom Lane wrote:

> Essentially, you're asking Devrim to downgrade his build box to a
> known insecure version of OpenSSL. I won't be surprised if his answer
> isn't printable. It almost certainly won't be "okay".

Right -- I am not interested in downgrading a package. RHEL 6.5 has been
out for a while, and supporting both RHEL 6.5 and 6.4 at the same time
would be pain for us. Even if we did it, what happens when 6.6 is
released and people still ask for 6.4?

SRPMS are out there, for the people who cannot upgrade and rebuild the
RPMs on their machines.

Regards,
--
Devrim GÜNDÜZ
Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com
PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer
Community: devrim~PostgreSQL.org, devrim.gunduz~linux.org.tr
http://www.gunduz.org Twitter: http://twitter.com/devrimgunduz

Hi,

On Fri, 2013-12-06 at 10:12 -0500, Vitaly Tskhovrebov wrote:

> I either should be allowed to build my own postgres from srpm,

You are:

http://yum.postgresql.org/srpms/9.2/redhat/rhel-6-x86_64/repoview/postgresql92.html

> and uuid-devel dependency should be resolvable,

It is also doable by passing --define "uuid 0" to the SRPM. uuid is a
predefined conditional in spec file:

http://svn.pgrpms.org/browser/rpm/redhat/9.2/postgresql/EL-6/postgresql-9.2.spec#L67

and here is how to do it:

http://svn.pgrpms.org/browser/rpm/redhat/9.2/postgresql/EL-6/README.rpm-dist#L290

> Or there should be a really strong reason to use 1.0.1e instead of
> 1.0.0, other than downgrading a box. Basically, 1.0.0 isn't that
> insecure, otherwise redhat would notify us on imminent threat.

I saw at least 3 announcements recently for an update -- mostly bug
fixes, though.

> There are tons of other situations available where redhat subscription
> will not work that good, including production db zone without direct
> access of internet resources. I would ask people not to come down this
> road and concentrate on specific issue:
>
> The bug is titled: broken dependency for rhel6. This because by
> dependency definition package is fine with openssl version installed
> officially, but somehow expects yum to figure out that Devrim will be
> happy should it use another package version.

As Tom stated, it is the auto dependency picker that is picking up the
openssl dependency. We don't depend on OpenSSL anywhere. What if we
build with the older version, and then it is broken with the new one?

Regards,
--
Devrim GÜNDÜZ
Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com
PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer
Community: devrim~PostgreSQL.org, devrim.gunduz~linux.org.tr
http://www.gunduz.org Twitter: http://twitter.com/devrimgunduz

On 12/6/2013 6:53 AM, Magnus Hagander wrote:
> What I'm asking for is the 9.2 postgresql packages to depend on a
> version of openssl that's present in 6.4. If the user is on 6.5, it
> will still match, and not be a problem.

I don't get it, on my centos 6.4 box, yum pulled in the new openssl
automatically. I wonder if the OP's system wasn't properly configured
with RHN.

--
john r pierce 37N 122W
somewhere on the middle of the left coast

On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce(at)hogranch(dot)com> wrote:

> On 12/6/2013 6:53 AM, Magnus Hagander wrote:
>> What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the user is on 6.5, it will still match, and not be a problem.
>
> I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system wasn't properly configured with RHN.
>

Well, the issue seems to be specific to RHEL, but if you look way back in the thread, I actually spun up a RHEL6.4 instance on EC2 and it happily installed the new version of openssl when I did "yum install postgresql92 postgresql92-server postgresql92-contrib", so I'm not entirely sure why it's broken for some folks on RHEL6.4, but not others.

On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce(at)hogranch(dot)com> wrote:

> On 12/6/2013 6:53 AM, Magnus Hagander wrote:
>> What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the user is on 6.5, it will still match, and not be a problem.
>
> I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system wasn't properly configured with RHN.
>

Well, the issue seems to be specific to RHEL, but if you look way back in the thread, I actually spun up a RHEL6.4 instance on EC2 and it happily installed the new version of openssl when I did "yum install postgresql92 postgresql92-server postgresql92-contrib", so I'm not entirely sure why it's broken for some folks on RHEL6.4, but not others.

On 07/12/13 06:36, Jeff Frost wrote:
>
> On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce(at)hogranch(dot)com> wrote:
>
>> On 12/6/2013 6:53 AM, Magnus Hagander wrote:
>>> What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the user is on 6.5, it will still match, and not be a problem.
>>
>> I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system wasn't properly configured with RHN.
>>
>
> Well, the issue seems to be specific to RHEL, but if you look way back in the thread, I actually spun up a RHEL6.4 instance on EC2 and it happily installed the new version of openssl when I did "yum install postgresql92 postgresql92-server postgresql92-contrib", so I'm not entirely sure why it's broken for some folks on RHEL6.4, but not others.
>

Yes, I did the same thing myself (RHEL 6.4 on EC2), and the dependencies
are all satisfied, including libssl from the 6.*5* series.

I note that Vitaly's original message has a strange (to me) looking
option in his dependency check - he did:

$ yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64

Whereas on my EC2 VM I can do:

$ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
provider: openssl.x86_64 1.0.1e-15.el6
provider: openssl.x86_64 1.0.1e-16.el6_5
....

i.e no enablerepo switch seems to be needed. Also following the
instructions from
http://www.postgresql.org/download/linux/redhat/ does not give me a repo
called pg92, but pgdg92:

$ yum repolist
Loaded plugins: amazon-id, rhui-lb, security
repo id repo name
status
pgdg92 PostgreSQL 9.2 6Server -
x86_64 297
rhui-REGION-client-config-server-6 Red Hat Update Infrastructure
2 4
rhui-REGION-rhel-server-releases Red Hat Enterprise Linux
Server 11,994
rhui-REGION-rhel-server-releases-optional Red Hat Enterprise Linux
Server 6,847
repolist: 19,142

It would be interesting to see what Vataly's machine thinks its yum
repos are, and exactly what he did to set them up.

Cheers

Mark

That's because I created this yum repo file myself, as this host
cannot have access to internet. Also, I mirrored yum.postgresql.org
into my network so box can access it, no mystery here. Enable=0 that's
why switch is needed.

Of course you have this dependency shown as you already have openssl
1.0.1e installed. But should you try to list them on machine with
lower version - it will never mention you need 1.0.1e at all.

--
Vitaly Tskhovrebov
+1 (914) 433-7683

On Dec 6, 2013, at 5:53 PM, Mark Kirkwood <mark(dot)kirkwood(at)catalyst(dot)net(dot)nz> wrote:

> On 07/12/13 06:36, Jeff Frost wrote:
>>
>> On Dec 6, 2013, at 8:44 AM, John R Pierce <pierce(at)hogranch(dot)com> wrote:
>>
>>> On 12/6/2013 6:53 AM, Magnus Hagander wrote:
>>>> What I'm asking for is the 9.2 postgresql packages to depend on a version of openssl that's present in 6.4. If the user is on 6.5, it will still match, and not be a problem.
>>>
>>> I don't get it, on my centos 6.4 box, yum pulled in the new openssl automatically. I wonder if the OP's system wasn't properly configured with RHN.
>>
>> Well, the issue seems to be specific to RHEL, but if you look way back in the thread, I actually spun up a RHEL6.4 instance on EC2 and it happily installed the new version of openssl when I did "yum install postgresql92 postgresql92-server postgresql92-contrib", so I'm not entirely sure why it's broken for some folks on RHEL6.4, but not others.
>
> Yes, I did the same thing myself (RHEL 6.4 on EC2), and the dependencies are all satisfied, including libssl from the 6.*5* series.
>
> I note that Vitaly's original message has a strange (to me) looking option in his dependency check - he did:
>
> $ yum deplist --enablerepo=pg92 postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
>
> Whereas on my EC2 VM I can do:
>
> $ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
> package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
> dependency: libssl.so.10(libssl.so.10)(64bit)
> provider: openssl.x86_64 1.0.1e-15.el6
> provider: openssl.x86_64 1.0.1e-16.el6_5
> ....
>
> i.e no enablerepo switch seems to be needed. Also following the instructions from
> http://www.postgresql.org/download/linux/redhat/ does not give me a repo called pg92, but pgdg92:
>
> $ yum repolist
> Loaded plugins: amazon-id, rhui-lb, security
> repo id repo name status
> pgdg92 PostgreSQL 9.2 6Server - x86_64 297
> rhui-REGION-client-config-server-6 Red Hat Update Infrastructure 2 4
> rhui-REGION-rhel-server-releases Red Hat Enterprise Linux Server 11,994
> rhui-REGION-rhel-server-releases-optional Red Hat Enterprise Linux Server 6,847
> repolist: 19,142
>
> It would be interesting to see what Vataly's machine thinks its yum repos are, and exactly what he did to set them up.
>
> Cheers
>
> Mark
>

On 07/12/13 12:36, Vitaly Tskhovrebov wrote:
> That's because I created this yum repo file myself, as this host
> cannot have access to internet. Also, I mirrored yum.postgresql.org
> into my network so box can access it, no mystery here. Enable=0 that's
> why switch is needed.
>
> Of course you have this dependency shown as you already have openssl
> 1.0.1e installed. But should you try to list them on machine with
> lower version - it will never mention you need 1.0.1e at all.
>

Right - therein would appear to lie the problem. Using EC2 again:

$ cat /etc/redhat-release
Red Hat Enterprise Linux Server release 6.4 (Santiago)

$ yum --disablerepo="*" --enablerepo=pgdg92 deplist
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
Unsatisfied dependency <========================
...

Which is exactly your problem, you need access to the repos [1] (or you
need to mirror them), since everything is fine in that case:

$ yum deplist postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Finding dependencies:
package: postgresql92-server.x86_64 9.2.6-1PGDG.rhel6
dependency: libssl.so.10(libssl.so.10)(64bit)
provider: openssl.x86_64 1.0.1e-15.el6
provider: openssl.x86_64 1.0.1e-16.el6_5
...

I don't know if it is feasible/possible/legal to mirror Redhat repos
(I'm merely messing with Redhat to help you - I normally use Ubuntu).

I would suggest that if you are avoiding use of the repos because of
lack of subscription then moving to Centos would make sense - these days
running a Linux distribution *without* access to updates etc is really
not a great idea!

Cheers

Mark

[1] specifically: rhui-REGION-rhel-server-releases

On 07/12/13 17:01, Mark Kirkwood wrote:
>
> [1] specifically: rhui-REGION-rhel-server-releases
>
>

Just to make it glaringly obvious:

$ yum install postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
Loaded plugins: amazon-id, rhui-lb, security
Setting up Install Process
Resolving Dependencies
--> Running transaction check
---> Package postgresql92-server.x86_64 0:9.2.6-1PGDG.rhel6 will be
installed
--> Processing Dependency: postgresql92 = 9.2.6-1PGDG.rhel6 for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libcrypto.so.10(libcrypto.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libssl.so.10(libssl.so.10)(64bit) for
package: postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Processing Dependency: libpq.so.5()(64bit) for package:
postgresql92-server-9.2.6-1PGDG.rhel6.x86_64
--> Running transaction check
---> Package openssl.x86_64 0:1.0.0-27.el6_4.2 will be updated
---> Package openssl.x86_64 0:1.0.1e-16.el6_5 will be an update
---> Package postgresql92.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
---> Package postgresql92-libs.x86_64 0:9.2.6-1PGDG.rhel6 will be installed
--> Finished Dependency Resolution

Dependencies Resolved

================================================================================
Package Arch Version Repository
Size
================================================================================
Installing:
postgresql92-server x86_64 9.2.6-1PGDG.rhel6 pgdg92
3.8 M
Installing for dependencies:
postgresql92 x86_64 9.2.6-1PGDG.rhel6 pgdg92
971 k
postgresql92-libs x86_64 9.2.6-1PGDG.rhel6 pgdg92
187 k
Updating for dependencies:
openssl x86_64 1.0.1e-16.el6_5
rhui-REGION-rhel-server-releases

1.5 M

Transaction Summary
================================================================================
Install 3 Package(s)
Upgrade 1 Package(s)

Total download size: 6.5 M
Is this ok [y/N]:

Having the exact same issue in CentOS 6.4.

CentOS 6.4 x86_64 Update tree provides: openssl-1.0.0-27.el6_4.2.x86_64
which provides libssl.so.10()(64bit) and libcrypto.so.10()(64bit)

CentOS 6.5 x86_64 Update tree provides: openssl-1.0.1e-16.el6_5.1.x86_64
which provides

Installed fresh copy of CentOS 6.4 and applied all updates within the 6.4
tree.

Installed the PostgreSQL 9.2 Repository from the following URL, with the
assumption that it would essentially stay 'pinned' and work within the 6.4
tree:

yum install
http://yum.postgresql.org/9.2/redhat/rhel-6.4-x86_64/pgdg-centos92-9.2-6.noarch.rpm

OS is 'pinned' to CentOS 6.4 so that updates are limited within the point
release branch. Upgrades/Updates to next point release branch are not
performed until that Branch has been vetted internally. This is a somewhat
typical practice in many corporate environments as the server is not
accessible externally, and predictability of the environment is required for
steady state operations. Changes must be understood, vetted, and documented
prior to release for operation.

We absolutely appreciate these pre-compiled RPMs. It may be helpful to call
out on the website that they are intended to be used with a system similar
to the original RPM build environment, and then call out the specifics of
that environment. If the build environment is in flux, or not fully
documented for consumers of the service, then there may be a stronger chance
of running into undocumented dependency issues such as these. The Fedora and
EPEL environments are great examples of this.

--
View this message in context: http://postgresql.1045698.n5.nabble.com/BUG-8659-Broken-dependencies-on-RHEL6-for-9-2-6-RPMs-tp5781988p5786279.html
Sent from the PostgreSQL - bugs mailing list archive at Nabble.com.

Hi,

On Fri, 2014-01-10 at 08:00 -0800, nodejkarabeg wrote:
> Installed the PostgreSQL 9.2 Repository from the following URL, with
> the assumption that it would essentially stay 'pinned' and work within
> the 6.4 tree:
>
> yum install
> http://yum.postgresql.org/9.2/redhat/rhel-6.4-x86_64/pgdg-centos92-9.2-6.noarch.rpm

This is not a correct assumption: Actually the original directory name
is rhel-6-86_64, and we create symlinks to each sub release, to match
yum configurations on different servers.

The policy is using the latest and greatest. Still, I would blame Red
Hat for breaking something during an upgrade.

Regards,
--
Devrim GÜNDÜZ
Principal Systems Engineer @ EnterpriseDB: http://www.enterprisedb.com
PostgreSQL Danışmanı/Consultant, Red Hat Certified Engineer
Twitter: @DevrimGunduz , @DevrimGunduzTR