libssl1.0.0:amd64 1.0.1e-2+deb7u7 upgrade fail

[Chris Hiestand]

Anyone else having problems with the wheezy openssl security update that was just released?

I'm looking into what is failing in the postinst script, but haven't IDed the cause yet.


$ sudo apt-get dist-upgrade
Reading package lists... Done
Building dependency tree
Reading state information... Done
Calculating upgrade... Done
The following packages will be upgraded:
libssl-dev libssl-doc libssl1.0.0 openssl
4 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
...
Fetched 4,901 kB in 0s (19.3 MB/s)
Reading changelogs...
Preconfiguring packages ...
debconf: warning: possible database corruption. Will attempt to repair by adding back missing question libssl1.0.0/restart-services.
debconf: warning: possible database corruption. Will attempt to repair by adding back missing question libssl1.0.0/restart-failed.
(Reading database ... 62423 files and directories currently installed.)
Preparing to replace libssl-doc 1.0.1e-2+deb7u6 (using .../libssl-doc_1.0.1e-2+deb7u7_all.deb) ...
Unpacking replacement libssl-doc ...
Preparing to replace libssl-dev 1.0.1e-2+deb7u6 (using .../libssl-dev_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace libssl1.0.0:amd64 1.0.1e-2+deb7u6 (using .../libssl1.0.0_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement libssl1.0.0:amd64 ...
Preparing to replace openssl 1.0.1e-2+deb7u6 (using .../openssl_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement openssl ...
Processing triggers for man-db ...
Setting up libssl-doc (1.0.1e-2+deb7u7) ...
Setting up libssl1.0.0:amd64 (1.0.1e-2+deb7u7) ...
Checking for services that may need to be restarted...done.
Checking init scripts...
dpkg: error processing libssl1.0.0:amd64 (--configure):
subprocess installed post-installation script returned error exit status 10
dpkg: dependency problems prevent configuration of libssl-dev:
libssl-dev depends on libssl1.0.0 (= 1.0.1e-2+deb7u7); however:
Package libssl1.0.0:amd64 is not configured yet.

dpkg: error processing libssl-dev (--configure):
dependency problems - leaving unconfigured
dpkg: dependency problems prevent configuration of openssl:
openssl depends on libssl1.0.0 (>= 1.0.1e-2+deb7u5); however:
Package libssl1.0.0:amd64 is not configured yet.

dpkg: error processing openssl (--configure):
dependency problems - leaving unconfigured
Errors were encountered while processing:
libssl1.0.0:amd64
libssl-dev
openssl
E: Sub-process /usr/bin/dpkg returned an error code (1)

[Chris Hiestand]

Post by Chris Hiestand
Setting up libssl1.0.0:amd64 (1.0.1e-2+deb7u7) ...
Checking for services that may need to be restarted...done.
Checking init scripts...
subprocess installed post-installation script returned error exit status 10

Problem solved. Turns out that because of a misconfigured debconf database this
system was missing the libraries/restart-without-asking entry - which would
crash the libssl1.0.0 postinst script.

In order to fix it, you can do something like put the following into your
debconf database (often found at /var/cache/debconf/config.dat):

Name: libraries/restart-without-asking
Template: libraries/restart-without-asking
Value: true
Owners: libssl1.0.0
Flags: seen

note: "Value: true" means to restart services without asking - this is potentially unsafe.

-Chris

[staticsafe]

Post by Chris Hiestand
Anyone else having problems with the wheezy openssl security update that was just released?
I'm looking into what is failing in the postinst script, but haven't IDed the cause yet.
dependency problems - leaving unconfigured
libssl1.0.0:amd64
libssl-dev
openssl
E: Sub-process /usr/bin/dpkg returned an error code (1)

Not seeing any issues here:
Log started: 2014-04-18 00:18:12
(Reading database ... 45152 files and directories currently installed.)
Preparing to replace libssl-dev 1.0.1e-2+deb7u6 (using
.../libssl-dev_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement libssl-dev ...
Preparing to replace libssl1.0.0:amd64 1.0.1e-2+deb7u6 (using
.../libssl1.0.0_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement libssl1.0.0:amd64 ...
Preparing to replace openssl 1.0.1e-2+deb7u6 (using
.../openssl_1.0.1e-2+deb7u7_amd64.deb) ...
Unpacking replacement openssl ...
Processing triggers for man-db ...
Setting up libssl1.0.0:amd64 (1.0.1e-2+deb7u7) ...
Checking for services that may need to be restarted...done.
Checking init scripts...

Restarting services possibly affected by the upgrade:
Restarting network management services: snmpd.

Services restarted successfully.

Setting up libssl-dev (1.0.1e-2+deb7u7) ...
Setting up openssl (1.0.1e-2+deb7u7) ...
Log ended: 2014-04-18 00:18:21

[Никита Борисенков]

I have the same issue.

DEBCONF_DEBUG=developer dpkg -D777 --configure libssl1.0.0
D000040: checking dependencies of libssl1.0.0 (- <none>)
D000400: checking group ...
D000400: checking possibility -> libc6
D000400: is installed, ok and found
D000400: found 3
D000400: found 3 matched 0 possfixbytrig -
D000400: checking group ...
D000400: checking possibility -> zlib1g
D000400: is installed, ok and found
D000400: found 3
D000400: found 3 matched 0 possfixbytrig -
D000400: checking group ...
D000400: checking possibility -> debconf
D000400: is installed, ok and found
D000400: found 3
D000400: found 3 matched 0 possfixbytrig -
D000400: checking group ...
D000400: checking possibility -> multiarch-support
D000400: is installed, ok and found
D000400: found 3
D000400: found 3 matched 0 possfixbytrig -
D000040: ok 2 msgs >><<
D000040: checking Breaks
Setting up libssl1.0.0 (1.0.1e-2+deb7u7) ...
D000002: fork/exec /var/lib/dpkg/info/libssl1.0.0.postinst ( configure
1.0.1e-2+deb7u6 )
debconf (developer): frontend started
debconf (developer): frontend running, package name is libssl1.0.0
debconf (developer): starting /var/lib/dpkg/info/libssl1.0.0.postinst
configure 1.0.1e-2+deb7u6
Checking for services that may need to be restarted...done.
debconf (developer): <-- VERSION 2.0
debconf (developer): --> 0 2.0
Checking init scripts...
debconf (developer): <-- INPUT critical libraries/restart-without-asking
debconf (developer): --> 10 "libraries/restart-without-asking" doesn't exist
debconf (developer): <-- GO
debconf (developer): --> 0 ok
debconf (developer): <-- GET libraries/restart-without-asking
debconf (developer): --> 10 libraries/restart-without-asking doesn't exist
dpkg: error processing libssl1.0.0 (--configure):
subprocess installed post-installation script returned error exit
status 10
Errors were encountered while processing:
libssl1.0.0