You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@guacamole.apache.org by David Rodriguez <dj...@gmail.com> on 2023/06/03 18:26:04 UTC
Existing RDP and SSH connections stop working after 1.5.2 upgrade
I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine, however although
the upgrade seems to be successfully, the existing RDP and SSH connections,
don't longer work, the connection drops instantantly.
Looking in the syslog, I see the following entry, which I think is the
cause of the connections drops:
*"/usr/local/sbin/guacd: symbol lookup error: /usr/local/lib/libguac.so.21:
undefined symbol: FIPS_mode"*
*I have checked already checked /usr/local/lib/ and the file is there and
also have ensured that ld.so conf files includes this path already.*
[image: image.png]
Installing the version 1.5.1 the connections back working normally.
Any suggestion about how to fix this?
Thanks!
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by David Rodriguez <dj...@gmail.com>.
Thanks Mike, I don't know really what cause this, but just completed an
upgrade of openssl (build) and now is working, so definitely this was
caused by this
El dom, 4 jun 2023 a las 23:28, Michael Jumper (<mj...@apache.org>)
escribió:
> On 6/4/23 11:05, David Rodriguez wrote:
> >
> > Sorry, forget the one for libssl-dev
> >
> > ~$ apt list libssl-dev
> >
> > libssl-dev/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
> > [instalado]
> >
>
> Well, that looks good, however:
>
> >
> > ~$ openssl version
> > OpenSSL 1.1.1n 15 Mar 2022
> >
> > ~$ apt list openssl
> >
> > openssl/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
> > [installed]
> > openssl/jammy-updates,jammy-security 3.0.2-0ubuntu1.10 i386
> >
>
> That looks pretty fishy. Something is definitely wrong if OpenSSL 3.0.2
> is installed according to the package manager, but the OpenSSL binary
> itself thinks it is version 1.1.1n.
>
> When I try the same, OpenSSL agrees with the package manager regarding
> its version:
>
> # apt install openssl
> ...
> Unpacking openssl (3.0.2-0ubuntu1.10) ...
> Setting up openssl (3.0.2-0ubuntu1.10) ...
> # openssl version
> OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
> #
>
> I'm not sure why your system is in this state, but it looks like there
> are conflicting versions of OpenSSL installed, the build is picking up
> the 1.1.1n version (which has the FIPS_mode() function), but then things
> are actually being run against 3.0.2 (which doesn't).
>
> - Mike
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by Michael Jumper <mj...@apache.org>.
On 6/4/23 11:05, David Rodriguez wrote:
>
> Sorry, forget the one for libssl-dev
>
> ~$ apt list libssl-dev
>
> libssl-dev/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
> [instalado]
>
Well, that looks good, however:
>
> ~$ openssl version
> OpenSSL 1.1.1n 15 Mar 2022
>
> ~$ apt list openssl
>
> openssl/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
> [installed]
> openssl/jammy-updates,jammy-security 3.0.2-0ubuntu1.10 i386
>
That looks pretty fishy. Something is definitely wrong if OpenSSL 3.0.2
is installed according to the package manager, but the OpenSSL binary
itself thinks it is version 1.1.1n.
When I try the same, OpenSSL agrees with the package manager regarding
its version:
# apt install openssl
...
Unpacking openssl (3.0.2-0ubuntu1.10) ...
Setting up openssl (3.0.2-0ubuntu1.10) ...
# openssl version
OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
#
I'm not sure why your system is in this state, but it looks like there
are conflicting versions of OpenSSL installed, the build is picking up
the 1.1.1n version (which has the FIPS_mode() function), but then things
are actually being run against 3.0.2 (which doesn't).
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by David Rodriguez <dj...@gmail.com>.
Sorry, forget the one for libssl-dev
~$ apt list libssl-dev
libssl-dev/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
[instalado]
El dom, 4 jun 2023 a las 20:04, David Rodriguez (<dj...@gmail.com>)
escribió:
> Yep...
> ~$ lsb_release -a
> No LSB modules are available.
> Distributor ID: Ubuntu
> Description: Ubuntu 22.04.2 LTS
> Release: 22.04
> Codename: jammy
>
> ~$ openssl version
> OpenSSL 1.1.1n 15 Mar 2022
>
> ~$ apt list openssl
>
> openssl/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64
> [installed]
> openssl/jammy-updates,jammy-security 3.0.2-0ubuntu1.10 i386
>
>
>
> El dom, 4 jun 2023 a las 19:22, Michael Jumper (<mj...@apache.org>)
> escribió:
>
>> The packages I see for Ubuntu 22.04 are all 3.x:
>>
>> https://packages.ubuntu.com/search?keywords=libssl-dev
>>
>> Are you sure you're using 22.04? Could there be a mismatch between the
>> headers installed by libssl-dev and the actual installed version of
>> OpenSSL?
>>
>> - Mike
>>
>> On 6/4/23 03:18, David Rodriguez wrote:
>> > Thanks Nicky & Mike !
>> > I have tried firstly what Nichy said and after all, the issue remains
>> > the same. Checking openssl version, I see that I have 1.1.1n from March
>> > 2022 which I think it is the standard for Ubuntu 22.0.4 .
>> > Any other stuff to try?
>> >
>> >
>> >
>> > El sáb, 3 jun 2023 a las 22:51, Michael Jumper (<mjumper@apache.org
>> > <ma...@apache.org>>) escribió:
>> >
>> > On 6/3/23 12:10, Nick Couchman wrote:
>> > > On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <djrm05@gmail.com
>> > <ma...@gmail.com>
>> > > <mailto:djrm05@gmail.com <ma...@gmail.com>>> wrote:
>> > >
>> > > I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine,
>> > however
>> > > although the upgrade seems to be successfully, the existing
>> > RDP and
>> > > SSH connections, don't longer work, the connection drops
>> > instantantly.
>> > > Looking in the syslog, I see the following entry, which I
>> > think is
>> > > the cause of the connections drops:
>> > > /"/usr/local/sbin/guacd: symbol lookup error:
>> > > /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"/
>> > >
>> > >
>> > > This usually happens because some of the libraries from the
>> previous
>> > > Guacamole version are left behind and then still get
>> > linked/referenced.
>> > > My suggestion would be;
>> > > * Remove all of the Guacamole binaries and libraries from the
>> system.
>> > > * In the source directory, "make distclean" and then reconfigure,
>> > > rebuild, and install.
>> > > * Try the connections, again, and see if they work.
>> > >
>> >
>> > Just tried installing guacamole-server 1.5.2 on a fresh Ubuntu 22.04
>> > instance, and things appear to work correctly. I see no undefined
>> > symbol
>> > errors.
>> >
>> > The FIPS_mode() function is part of OpenSSL but is specific to
>> OpenSSL
>> > 1.x. It was deprecated and removed from OpenSSL 3.0, so the
>> > guacamole-server code uses that function only if built against an
>> older
>> > OpenSSL:
>> >
>> >
>> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
>> <
>> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
>> >
>> >
>> > My guess would be that the version of OpenSSL present at build time
>> was
>> > older, and that the version was upgraded later to a version that
>> lacks
>> > FIPS_mode(). Rebuilding guacamole-server against the copy of OpenSSL
>> > currently present should solve the issue.
>> >
>> > - Mike
>> >
>> >
>> ---------------------------------------------------------------------
>> > To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
>> > <ma...@guacamole.apache.org>
>> > For additional commands, e-mail: user-help@guacamole.apache.org
>> > <ma...@guacamole.apache.org>
>> >
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
>> For additional commands, e-mail: user-help@guacamole.apache.org
>>
>>
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by David Rodriguez <dj...@gmail.com>.
Yep...
~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 22.04.2 LTS
Release: 22.04
Codename: jammy
~$ openssl version
OpenSSL 1.1.1n 15 Mar 2022
~$ apt list openssl
openssl/jammy-updates,jammy-security,now 3.0.2-0ubuntu1.10 amd64 [installed]
openssl/jammy-updates,jammy-security 3.0.2-0ubuntu1.10 i386
El dom, 4 jun 2023 a las 19:22, Michael Jumper (<mj...@apache.org>)
escribió:
> The packages I see for Ubuntu 22.04 are all 3.x:
>
> https://packages.ubuntu.com/search?keywords=libssl-dev
>
> Are you sure you're using 22.04? Could there be a mismatch between the
> headers installed by libssl-dev and the actual installed version of
> OpenSSL?
>
> - Mike
>
> On 6/4/23 03:18, David Rodriguez wrote:
> > Thanks Nicky & Mike !
> > I have tried firstly what Nichy said and after all, the issue remains
> > the same. Checking openssl version, I see that I have 1.1.1n from March
> > 2022 which I think it is the standard for Ubuntu 22.0.4 .
> > Any other stuff to try?
> >
> >
> >
> > El sáb, 3 jun 2023 a las 22:51, Michael Jumper (<mjumper@apache.org
> > <ma...@apache.org>>) escribió:
> >
> > On 6/3/23 12:10, Nick Couchman wrote:
> > > On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <djrm05@gmail.com
> > <ma...@gmail.com>
> > > <mailto:djrm05@gmail.com <ma...@gmail.com>>> wrote:
> > >
> > > I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine,
> > however
> > > although the upgrade seems to be successfully, the existing
> > RDP and
> > > SSH connections, don't longer work, the connection drops
> > instantantly.
> > > Looking in the syslog, I see the following entry, which I
> > think is
> > > the cause of the connections drops:
> > > /"/usr/local/sbin/guacd: symbol lookup error:
> > > /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"/
> > >
> > >
> > > This usually happens because some of the libraries from the
> previous
> > > Guacamole version are left behind and then still get
> > linked/referenced.
> > > My suggestion would be;
> > > * Remove all of the Guacamole binaries and libraries from the
> system.
> > > * In the source directory, "make distclean" and then reconfigure,
> > > rebuild, and install.
> > > * Try the connections, again, and see if they work.
> > >
> >
> > Just tried installing guacamole-server 1.5.2 on a fresh Ubuntu 22.04
> > instance, and things appear to work correctly. I see no undefined
> > symbol
> > errors.
> >
> > The FIPS_mode() function is part of OpenSSL but is specific to
> OpenSSL
> > 1.x. It was deprecated and removed from OpenSSL 3.0, so the
> > guacamole-server code uses that function only if built against an
> older
> > OpenSSL:
> >
> >
> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
> <
> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
> >
> >
> > My guess would be that the version of OpenSSL present at build time
> was
> > older, and that the version was upgraded later to a version that
> lacks
> > FIPS_mode(). Rebuilding guacamole-server against the copy of OpenSSL
> > currently present should solve the issue.
> >
> > - Mike
> >
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> > <ma...@guacamole.apache.org>
> > For additional commands, e-mail: user-help@guacamole.apache.org
> > <ma...@guacamole.apache.org>
> >
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by Michael Jumper <mj...@apache.org>.
The packages I see for Ubuntu 22.04 are all 3.x:
https://packages.ubuntu.com/search?keywords=libssl-dev
Are you sure you're using 22.04? Could there be a mismatch between the
headers installed by libssl-dev and the actual installed version of OpenSSL?
- Mike
On 6/4/23 03:18, David Rodriguez wrote:
> Thanks Nicky & Mike !
> I have tried firstly what Nichy said and after all, the issue remains
> the same. Checking openssl version, I see that I have 1.1.1n from March
> 2022 which I think it is the standard for Ubuntu 22.0.4 .
> Any other stuff to try?
>
>
>
> El sáb, 3 jun 2023 a las 22:51, Michael Jumper (<mjumper@apache.org
> <ma...@apache.org>>) escribió:
>
> On 6/3/23 12:10, Nick Couchman wrote:
> > On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <djrm05@gmail.com
> <ma...@gmail.com>
> > <mailto:djrm05@gmail.com <ma...@gmail.com>>> wrote:
> >
> > I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine,
> however
> > although the upgrade seems to be successfully, the existing
> RDP and
> > SSH connections, don't longer work, the connection drops
> instantantly.
> > Looking in the syslog, I see the following entry, which I
> think is
> > the cause of the connections drops:
> > /"/usr/local/sbin/guacd: symbol lookup error:
> > /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"/
> >
> >
> > This usually happens because some of the libraries from the previous
> > Guacamole version are left behind and then still get
> linked/referenced.
> > My suggestion would be;
> > * Remove all of the Guacamole binaries and libraries from the system.
> > * In the source directory, "make distclean" and then reconfigure,
> > rebuild, and install.
> > * Try the connections, again, and see if they work.
> >
>
> Just tried installing guacamole-server 1.5.2 on a fresh Ubuntu 22.04
> instance, and things appear to work correctly. I see no undefined
> symbol
> errors.
>
> The FIPS_mode() function is part of OpenSSL but is specific to OpenSSL
> 1.x. It was deprecated and removed from OpenSSL 3.0, so the
> guacamole-server code uses that function only if built against an older
> OpenSSL:
>
> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45 <https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45>
>
> My guess would be that the version of OpenSSL present at build time was
> older, and that the version was upgraded later to a version that lacks
> FIPS_mode(). Rebuilding guacamole-server against the copy of OpenSSL
> currently present should solve the issue.
>
> - Mike
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> <ma...@guacamole.apache.org>
> For additional commands, e-mail: user-help@guacamole.apache.org
> <ma...@guacamole.apache.org>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by David Rodriguez <dj...@gmail.com>.
Thanks Nicky & Mike !
I have tried firstly what Nichy said and after all, the issue remains the
same. Checking openssl version, I see that I have 1.1.1n from March 2022
which I think it is the standard for Ubuntu 22.0.4 .
Any other stuff to try?
El sáb, 3 jun 2023 a las 22:51, Michael Jumper (<mj...@apache.org>)
escribió:
> On 6/3/23 12:10, Nick Couchman wrote:
> > On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <djrm05@gmail.com
> > <ma...@gmail.com>> wrote:
> >
> > I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine, however
> > although the upgrade seems to be successfully, the existing RDP and
> > SSH connections, don't longer work, the connection drops
> instantantly.
> > Looking in the syslog, I see the following entry, which I think is
> > the cause of the connections drops:
> > /"/usr/local/sbin/guacd: symbol lookup error:
> > /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"/
> >
> >
> > This usually happens because some of the libraries from the previous
> > Guacamole version are left behind and then still get linked/referenced.
> > My suggestion would be;
> > * Remove all of the Guacamole binaries and libraries from the system.
> > * In the source directory, "make distclean" and then reconfigure,
> > rebuild, and install.
> > * Try the connections, again, and see if they work.
> >
>
> Just tried installing guacamole-server 1.5.2 on a fresh Ubuntu 22.04
> instance, and things appear to work correctly. I see no undefined symbol
> errors.
>
> The FIPS_mode() function is part of OpenSSL but is specific to OpenSSL
> 1.x. It was deprecated and removed from OpenSSL 3.0, so the
> guacamole-server code uses that function only if built against an older
> OpenSSL:
>
>
> https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
>
> My guess would be that the version of OpenSSL present at build time was
> older, and that the version was upgraded later to a version that lacks
> FIPS_mode(). Rebuilding guacamole-server against the copy of OpenSSL
> currently present should solve the issue.
>
> - Mike
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
> For additional commands, e-mail: user-help@guacamole.apache.org
>
>
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by Michael Jumper <mj...@apache.org>.
On 6/3/23 12:10, Nick Couchman wrote:
> On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <djrm05@gmail.com
> <ma...@gmail.com>> wrote:
>
> I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine, however
> although the upgrade seems to be successfully, the existing RDP and
> SSH connections, don't longer work, the connection drops instantantly.
> Looking in the syslog, I see the following entry, which I think is
> the cause of the connections drops:
> /"/usr/local/sbin/guacd: symbol lookup error:
> /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"/
>
>
> This usually happens because some of the libraries from the previous
> Guacamole version are left behind and then still get linked/referenced.
> My suggestion would be;
> * Remove all of the Guacamole binaries and libraries from the system.
> * In the source directory, "make distclean" and then reconfigure,
> rebuild, and install.
> * Try the connections, again, and see if they work.
>
Just tried installing guacamole-server 1.5.2 on a fresh Ubuntu 22.04
instance, and things appear to work correctly. I see no undefined symbol
errors.
The FIPS_mode() function is part of OpenSSL but is specific to OpenSSL
1.x. It was deprecated and removed from OpenSSL 3.0, so the
guacamole-server code uses that function only if built against an older
OpenSSL:
https://github.com/apache/guacamole-server/blob/83ca7aa16b49830b5adb5a0ce60082b385163934/src/libguac/fips.c#L23-L45
My guess would be that the version of OpenSSL present at build time was
older, and that the version was upgraded later to a version that lacks
FIPS_mode(). Rebuilding guacamole-server against the copy of OpenSSL
currently present should solve the issue.
- Mike
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org
Re: Existing RDP and SSH connections stop working after 1.5.2 upgrade
Posted by Nick Couchman <vn...@apache.org>.
On Sat, Jun 3, 2023 at 2:26 PM David Rodriguez <dj...@gmail.com> wrote:
> I'm trying to upgrade to 1.5.2 in a Ubuntu 22.0.4 machine, however
> although the upgrade seems to be successfully, the existing RDP and SSH
> connections, don't longer work, the connection drops instantantly.
> Looking in the syslog, I see the following entry, which I think is the
> cause of the connections drops:
> *"/usr/local/sbin/guacd: symbol lookup error:
> /usr/local/lib/libguac.so.21: undefined symbol: FIPS_mode"*
>
This usually happens because some of the libraries from the previous
Guacamole version are left behind and then still get linked/referenced. My
suggestion would be;
* Remove all of the Guacamole binaries and libraries from the system.
* In the source directory, "make distclean" and then reconfigure, rebuild,
and install.
* Try the connections, again, and see if they work.
-Nick