1:4.2.6.p3+dfsg-1ubuntu3.11 - OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0

[nayan]

Getting error after upgrade in 12.04 LTS (3.2.0-23-virtual) - ntpq: relocation error: ntpq: symbol CRYPTO_memcmp, version OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0 with link time reference

ntpd not starting after the upgrade.

[Marc Deslauriers (mdeslaur)]

That's odd. Do you have a custom openssl installed?

Could you please paste the output of the following commands:

$ ldd /usr/bin/ntpq

$ apt-cache policy openssl

Thanks!

[Marc Deslauriers (mdeslaur)]

Also:

$ apt-cache policy libssl1.0.0

Thanks

[Jeffrey Hogan (jeff-hogan1)]

Running into the same issue on 12.04:

$ ldd /usr/bin/ntpq
 linux-vdso.so.1 => (0x00007fff76bc9000)
 libopts.so.25 => /usr/lib/libopts.so.25 (0x00007fabe42dd000)
 libedit.so.2 => /usr/lib/x86_64-linux-gnu/libedit.so.2 (0x00007fabe40b6000)
 libcrypto.so.1.0.0 => /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007fabe3cdb000)
 librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007fabe3ad3000)
 libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007fabe3715000)
 libbsd.so.0 => /lib/x86_64-linux-gnu/libbsd.so.0 (0x00007fabe3508000)
 libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007fabe32e1000)
 libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007fabe30dd000)
 libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007fabe2ebf000)
 /lib64/ld-linux-x86-64.so.2 (0x00007fabe473c000)

$ apt-cache policy openssl
openssl:
  Installed: 1.0.1f-1ubuntu2.8
  Candidate: 1.0.1f-1ubuntu2.8
  Version table:
 *** 1.0.1f-1ubuntu2.8 0
        100 /var/lib/dpkg/status
     1.0.1-4ubuntu5.38 0
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages

$ apt-cache policy libssl1.0.0
libssl1.0.0:
  Installed: 1.0.1f-1ubuntu2.8
  Candidate: 1.0.1f-1ubuntu2.8
  Version table:
 *** 1.0.1f-1ubuntu2.8 0
        100 /var/lib/dpkg/status
     1.0.1-4ubuntu5.38 0
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages

[Marc Deslauriers (mdeslaur)]

It looks like you're using an openssl package that wasn't built for Ubuntu 12.04 LTS.

You'll need to rebuild ntp for your custom openssl version, or use the openssl package that comes from Ubuntu 12.04 LTS.

[nayan (nayank)]

        ~$ ldd /usr/bin/ntpq
 linux-vdso.so.1 => (0x00007fff4d9ff000)
 libopts.so.25 => /usr/lib/libopts.so.25 (0x00007f753cb2b000)
 libedit.so.2 => /usr/lib/x86_64-linux-gnu/libedit.so.2 (0x00007f753c904000)
 libcrypto.so.1.0.0 => /lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007f753c53b000)
 librt.so.1 => /lib/x86_64-linux-gnu/librt.so.1 (0x00007f753c333000)
 libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f753bf76000)
 libbsd.so.0 => /lib/x86_64-linux-gnu/libbsd.so.0 (0x00007f753bd69000)
 libtinfo.so.5 => /lib/x86_64-linux-gnu/libtinfo.so.5 (0x00007f753bb42000)
 libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f753b93e000)
 libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f753b726000)
 libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f753b509000)
 /lib64/ld-linux-x86-64.so.2 (0x00007f753cf8e000)

 ~$ apt-cache policy openssl
openssl:
  Installed: 1.0.1-4ubuntu5.38
  Candidate: 1.0.1-4ubuntu5.38
  Version table:
 *** 1.0.1-4ubuntu5.38 0
        500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
        100 /var/lib/dpkg/status
     1.0.1-4ubuntu3 0
        500 http://archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

$ apt-cache policy libssl1.0.0
libssl1.0.0:
  Installed: 1.0.1-4ubuntu5
  Candidate: 1.0.1-4ubuntu5.38
  Version table:
     1.0.1-4ubuntu5.38 0
        500 http://archive.ubuntu.com/ubuntu/ precise-updates/main amd64 Packages
        500 http://security.ubuntu.com/ubuntu/ precise-security/main amd64 Packages
 *** 1.0.1-4ubuntu5 0
        100 /var/lib/dpkg/status
     1.0.1-4ubuntu3 0
        500 http://archive.ubuntu.com/ubuntu/ precise/main amd64 Packages

This is happening in all machines having kernel 3.2.0-23-virtual.

[nayan (nayank)]

all the machines are having openssl installed from ubuntu repository.

dpkg -l | grep openssl
ii openssl 1.0.1-4ubuntu5.38 Secure Socket Layer (SSL) binary and related cryptographic tools

[Marc Deslauriers (mdeslaur)]

@nayan: your libssl1.0.0 package hasn't been updated in a long time, is too old, and contains numerous security vulnerabilities.

You need to update it to the version that matches your openssl package (1.0.1-4ubuntu5.38) by installing all security updates:

$ sudo apt-get update
$ sudo apt-get dist-upgrade

[nayan (nayank)]

Thanks Mark , upgrade of libssl1.0.0 fixed the issue of ntp.

dpkg -l | grep libssl1
ii libssl1.0.0 1.0.1-4ubuntu5.38 SSL shared libraries

 dpkg -l | grep openssl
ii openssl 1.0.1-4ubuntu5.38 Secure Socket Layer (SSL) binary and related cryptographic tools

dpkg -l | grep ntp
ii ntp 1:4.2.6.p3+dfsg-1ubuntu3.11 Network Time Protocol daemon and utility programs

[Marc Deslauriers (mdeslaur)]

Great, I'm closing this bug. Thanks!

[Dixon Dick (dixon1e)]

We're seeing this on an arm distro, for 14.04 LTS. What exactly was done to solve this?

We are doing:

apt-get update
apt-get upgrade
apt-get dist-upgrade

yet when we do:

apt-get install ntp

we get the error:

Setting up ntp (1:4.2.6.p3+dfsg-1ubuntu3.11) ...
 * Starting NTP server ntpd
/usr/sbin/ntpd: relocation error: /usr/sbin/ntpd: sympol CRYPTO_memcmp, version OPENSSL_1.0.0 not defined in file libcrypto.so.1.0.0 with link time reference

[Seth Arnold (seth-arnold)]

Dixon, I think the apt configuration needs to be debugged:

ntp version 1:4.2.6.p3+dfsg-1ubuntu3.11 is built for 12.04 LTS; apt shouldn't have selected it for install on 14.04 LTS release.

Thanks

[nandelbosc (nandelbosc-gmail)]

Same problem here.

Resolved upgrading libssl1.0.0 and openssl.

Thank's!