pkgrm/pkgadd problem, I messed up, need advice

haertig · 03-20-2008, 08:43 PM

My intent was to upgrade OpenSSL to a newer version that was a dependency for something else.

These came originally installed on the system: OpenSSL 0.9.8d, OpenSSH 4.4p1

As you read through my trials and tribulations below, try not to giggle too much. I am not a real Solaris sysadm, I only play one on TV. I was asked to try to help out, and "help" plenty I did! Luckily this is a new lab machine so I haven't killed production.

WHAT STUPID ME DID:
===================

pkgrm SMCossl... (can't remember the full name, but it was the OpenSSL package)

wget ftp://ftp.sunfreeware.com/pub/freewa...sparc-local.gz

OOPS! "libssl.so not found" OUCH - that one stung!

Got openssl-0.9.8f-sol9-sparc-local.gz using another box and transferred to the hosed one

pkgadd -d openssl-0.9.8f-sol9-sparc-local

Successful pkgadd

Now wget outgoing works

Tried to ssh incoming from a client: Error message (on client end):
"ssh_exchange_identification: Connection closed by remote host"

Tried ssh outgoing from the hosed system: Error message:
"OpenSSL version mismatch. Built against 90804f, you have 908070"

Used wget to transfer openssh-4.7p1-sol9-sparc-local.gz from http://www.sunfreeware.com
This package lists openssl.0.9.8f as a dependency, so I assume it's built against 0.9.8f and would be compatible.

I have not tried to install this new openssh (4.7p1) package yet!

I am currently ssh'ed into this server I hosed and don't want to kill that lifeline with an install. This ssh session was initiated BEFORE I hosed up OpenSSL. Console access is available, but inconvenient for me to drive over there. I will if I need to.

IS THERE A WAY OUT OF MY STUPIDITY WITHOUT HAVING TO RESTORE FROM BACKUP?
=========================================================================

czezz · 03-25-2008, 08:36 AM

Is this OpenSolaris or regular Solaris ?

Show me output of that:

Code:

# svcs -l ssh
# svcs -d ssh
# netstat -an | grep 22

Make sure you have this:

Code:

# ls -al /var/sadm/pkg/ | grep ssl
drwxr-xr-x   4 root     root         512 Dec 19 15:23 SUNWopenssl-commands
drwxr-xr-x   4 root     root         512 Dec 19 15:23 SUNWopenssl-include
drwxr-xr-x   4 root     root         512 Dec 19 15:23 SUNWopenssl-libraries
drwxr-xr-x   4 root     root         512 Dec 19 15:23 SUNWopenssl-man
drwxr-xr-x   4 root     root         512 Dec 19 15:23 SUNWopensslr

Perhaps you will need to generate new keys:
/etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_rsa_key.pub

Let us see what /var/adm/messages and /var/log/syslog says when ssh connection is trying to be established