[Solved] Can't install libressl in place of openssl

Maruba · 2018-06-16 02:30:00

I'm trying to install libressl in place of openssl:

    $ pacaur -Sf libressl

    [.............]


    :: ¿Continuar con la instalación? [S/n] 
    (1/1) comprobando las claves del depósito          [##########################] 100%
    (1/1) verificando la integridad de los paquetes    [##########################] 100%
    (1/1) cargando los archivos de los paquetes        [##########################] 100%
    (1/1) comprobando conflictos entre archivos        [##########################] 100%
    error: no se pudo realizar la operación (archivos en conflicto)
    libressl: /usr/lib/libcrypto.so.1.0.0 ya existe en el sistema de archivos (es parte de openssl-1.0)
    libressl: /usr/lib/libssl.so.1.0.0 ya existe en el sistema de archivos (es parte de openssl-1.0)
    Ocurrieron errores, por lo que no se actualizaron los paquetes

I'm even using the -f option here, why won't it overwritte the existing libraries?

Last edited by Maruba (2018-06-21 05:13:35)

loqs · 2018-06-16 07:36:03

You are aware libressl is not ABI compatible with openssl 1.1? If that command succeeds programs such as pacman will stop working.

RoundCube · 2018-06-16 16:02:43

loqs wrote:

You are aware libressl is not ABI compatible with openssl 1.1? If that command succeeds programs such as pacman will stop working.

Do I understand it correctly that it would work if you recompile afterwards all packages which depend on openssl?
(the pacman package btw. doesn't mention a dependency to openssl)

You can find out which package owns the file with
pacman -Qo /usr/lib/libcrypto.so.1.0.0

pacman -Qi openssl-1.0
will tell you why this package is installed and which packages depend on it

pacman -Rdd
would allow you to remove the package ignoring dependencies. YOU have to take care then to fullfill the dependencies again, such by recompiling the packages which depend on openssl-1.0 after providing /usr/lib/libcrypto.so.1.0.0 by libressl.
And, as the packages in the Arch repo are compiled against openssl, you cannot let pacman install updated version of them, but have to do recompile them against libressl – In short, you get a maintenance burden.

eschwartz · 2018-06-17 03:16:32

RoundCube wrote:

loqs wrote:
You are aware libressl is not ABI compatible with openssl 1.1? If that command succeeds programs such as pacman will stop working.
Do I understand it correctly that it would work if you recompile afterwards all packages which depend on openssl?
(the pacman package btw. doesn't mention a dependency to openssl)

That is because it does not, in fact, depend on openssl.

It depends on libcurl.so, which depends on openssl.

So using libressl without recompiling every package which links against openssl, will break curl. Breaking curl breaks pacman, and therefore you'll also break pacman... but ultimately it is because of curl, not some intrinsic property of pacman.

seth · 2018-06-17 06:13:46

He's about to replace openssl-1.0, though (at least by that output) which isn't going to break that many programs. It might break wpa_supplicant and some others if libressl isn't ABI compatible w/ openssl-1.0

Either way @Maruba, if you use pacaur to mess w/ some fundamental libraries and wonder about file conflicts, that's a clear message that you simply should not be doing this. It's - at this time - way above your pay grade.

loqs · 2018-06-17 07:20:16

@seth https://aur.archlinux.org/packages/libressl/ conflicts and provides openssl.

seth · 2018-06-17 09:27:50

Indeed, and the latest comment to the package (from May 2017) actually even points that out, but the package maintainer just pushes new versions of libressl and ignores that the package is fundamentally broken…

progandy · 2018-06-17 10:10:33

As far as API/ABI compatibility:

https://github.com/libressl-portable/po … th-openssl
LibreSSL is API compatible with OpenSSL 1.0.1, but does not yet include all new APIs from OpenSSL 1.0.2 and later. LibreSSL also includes APIs not yet present in OpenSSL. The current common API subset is OpenSSL 1.0.1.
LibreSSL is not ABI compatible with any release of OpenSSL, or necessarily earlier releases of LibreSSL. You will need to relink your programs to LibreSSL in order to use it, just as in moving between major versions of OpenSSL. LibreSSL's installed library version numbers are incremented to account for ABI and API changes.

Since 2.7.0 there is improved, but not complete support for 1.0.2 and 1.1 APIs:
https://github.com/libressl-portable/po … ngeLog#L77

Last edited by progandy (2018-06-17 10:13:33)

Arch Linux

#1 2018-06-16 02:30:00

[Solved] Can't install libressl in place of openssl

#2 2018-06-16 07:36:03

Re: [Solved] Can't install libressl in place of openssl

#3 2018-06-16 16:02:43

Re: [Solved] Can't install libressl in place of openssl

#4 2018-06-17 03:16:32

Re: [Solved] Can't install libressl in place of openssl

#5 2018-06-17 06:13:46

Re: [Solved] Can't install libressl in place of openssl

#6 2018-06-17 07:20:16

Re: [Solved] Can't install libressl in place of openssl

#7 2018-06-17 09:27:50

Re: [Solved] Can't install libressl in place of openssl

#8 2018-06-17 10:10:33

Re: [Solved] Can't install libressl in place of openssl

Board footer