I've got a problem when I upgraded my OpenSSL on RHEL 6.5. The OpenSSL is missing the library
libcrypto.so.10. Instead the
openssl 1.0.1j created lib is
libcrypto.so.1.0.0. I've made a soft link, but it still does not work for other packages using
Does anyone have experience on this problem?
Explanation (addendum/edit): this is required info since many will be looking to use the 1.0.1j version directly from the OpenSSL package to escape the latest (2014.10.15) "POODLE" vulnerability in OpenSSL. If you get the tar.gz file from openssl.org at this time, you should not have a problem. There previously was a problem for a short time and that publication may still exist on other sites, so avoid taking down the file other than at openssl.org: openssl downloads.
Please read through the SSL3 warning in the @jvp answer regarding RPM's since the updates do not completely solve server problems that arise when servers permit such connections. a discussion of this additional vulnerability can be found at: ncas division of us-cert.gov
See the answer regarding using Red Hat based RPM's for EL6 and EL7.
Look to your
/usr/lib directory for 32-bit and
/usr/lib64 for 64 bit and the layout should be as follows:
- libcrypto.so -> libcrypto.so.1.0.1j
- libcrypto.so.10 -> libcrypto.so.1.0.1j
- .libcrypto.so.10.hmac -> .libcrypto.so.1.0.1j.hmaclibssl.a
- libssl.so -> libssl.so.1.0.1j
- libssl.so.10 -> libssl.so.1.0.1j
- .libssl.so.10.hmac -> .libssl.so.1.0.1j.hmac
There are also the lib sub-directories
package, but these have never been a problem.