Bug 13590 - Freeradius not starting: libssl version mismatch
Summary: Freeradius not starting: libssl version mismatch
Status: CLOSED FIXED
Alias: None
Product: IPFire
Classification: Unclassified
Component: --- (show other bugs)
Version: 2
Hardware: x86_64 Unspecified
: Will only affect a few users Crash
Assignee: Michael Tremer
QA Contact:
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2024-02-15 16:26 UTC by datamorgana
Modified: 2024-02-29 17:23 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description datamorgana 2024-02-15 16:26:02 UTC
After an update of IPFire to core183, Freeradius refuses to start.
No logs are written.

Manual debugging shows a version mismatch of libssl and freeradius:

# /usr/sbin/radiusd -X -d /etc/raddb
libssl version mismatch.  built: 30100020 linked: 30200010

Thanks for reading.
Comment 1 Michael Tremer 2024-02-15 16:28:48 UTC
Can you try to back up your configuration, uninstall the package and install it again, please?
Comment 2 Adolf Belka 2024-02-15 16:39:14 UTC
@Michael

If freeradius is linked to openssl then presumably freeradius has to have its PAK_VER bumped and be shipped with the core update.


If my understanding is correct then I can do a patch submission to bump and ship freeradius for CU184.
Comment 3 Michael Tremer 2024-02-15 16:42:24 UTC
Yes, this would be the fix. A reinstall would confirm that.

I forgot to mention that it would be a good idea to empty the package cache in /var/cache/pakfire before install.
Comment 4 datamorgana 2024-02-15 16:52:04 UTC
What do I have to do to reinstall only the patched freeradius package?
Can I leave IPFire as it is and do only a reinstall of freeradius?
Will the freeradius configuration be affected/deleted?
Comment 5 Michael Tremer 2024-02-15 16:56:13 UTC
(In reply to datamorgana from comment #4)
> Will the freeradius configuration be affected/deleted?

It should be automatically be backed up, but just to be sure, have a backup.

> What do I have to do to reinstall only the patched freeradius package?
> Can I leave IPFire as it is and do only a reinstall of freeradius?

Yes, you only need to reinstall the freeradius package.
Comment 6 datamorgana 2024-02-15 18:28:04 UTC
Thanks!

And how will I receive notice of the newly updated freeradius package?
Will it be listed in Packfire's "Available Updates" after a click on "Refresh List" while still having not uninstalled the package, or do I need to uninstall the package first and "Refresh List" or just wait?
Comment 7 datamorgana 2024-02-15 18:29:29 UTC
(In reply to Michael Tremer from comment #3)
> Yes, this would be the fix. A reinstall would confirm that.
> 
> I forgot to mention that it would be a good idea to empty the package cache
> in /var/cache/pakfire before install.

# ls -la freeradius*
-rw-r--r-- 1 root root 2403485 Nov 18  2020 freeradius-3.0.21-12.ipfire
-rw-r--r-- 1 root root 2403944 Mar 28  2021 freeradius-3.0.21-13.ipfire
-rw-r--r-- 1 root root 1925542 Oct 25  2021 freeradius-3.0.23-14.ipfire
-rw-r--r-- 1 root root 1946169 Nov  4  2022 freeradius-3.0.23-15.ipfire
-rw-r--r-- 1 root root 1945708 Mar  7  2023 freeradius-3.0.23-16.ipfire
-rw-r--r-- 1 root root 1969214 Jun 17  2023 freeradius-3.0.26-17.ipfire
-rw-r--r-- 1 root root 1975527 Jul 19  2023 freeradius-3.0.26-18.ipfire
-rw-r--r-- 1 root root 1999033 Oct 13 16:49 freeradius-3.2.3-19.ipfire

All of them, or just freeradius-3.0.21-12.ipfire?
Comment 8 datamorgana 2024-02-15 18:33:31 UTC
(In reply to datamorgana from comment #7)
> (In reply to Michael Tremer from comment #3)

> All of them, or just freeradius-3.0.21-12.ipfire?

Sorry, I meant the latest, freeradius-3.2.3-19.ipfire but it would probably safe to just delete all.
Comment 9 Michael Tremer 2024-02-15 18:53:48 UTC
All is fine. The older ones won't be used anyways.
Comment 11 Michael Tremer 2024-02-16 12:36:07 UTC
Merged into master.
Comment 12 datamorgana 2024-02-29 17:23:00 UTC
I did a successful re-install of the addon freeradius-3.2.3-19.
Tests with the patched freeradius were also successful.
Thanks a lot!

I will set the issue to CLOSED / FIXED.