RaspberryPi and "openssl:Error: 'rehash' is an invalid command"

[Jeffrey Walton]

Hi Everyone,

I ran dist-upgrade today on my RPI-3. It resulted in:

```
Calculating upgrade... Done
The following packages will be upgraded:
  armbian-bionic-desktop armbian-config armbian-firmware ca-certificates
  chromium-browser chromium-chromedriver chromium-codecs-ffmpeg-extra
  python3-software-properties software-properties-common
9 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.
```

And:

```
...
Setting up chromium-codecs-ffmpeg-extra (83.0.4103.61-0ubuntu0.18.04.1) ...
Setting up python3-software-properties (0.96.24.32.13) ...
Setting up ca-certificates (20190110~18.04.1) ...
Updating certificates in /etc/ssl/certs...
openssl:Error: 'rehash' is an invalid command.

Standard commands
asn1parse ca ciphers cms
crl crl2pkcs7 dgst dh
dhparam dsa dsaparam ec
...

127 added, 8 removed; done.
Setting up software-properties-common (0.96.24.32.13) ...
Setting up chromium-browser (83.0.4103.61-0ubuntu0.18.04.1) ...
```

Operating System:

```
$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 18.04.4 LTS
Release: 18.04
Codename: bionic
```
========================================

And finally:

```
$ apt-cache show ca-certificates
Package: ca-certificates
Architecture: all
Version: 20190110~18.04.1
Multi-Arch: foreign
Priority: important
Section: misc
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Michael Shuler <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 382
Depends: openssl (>= 1.1.0), debconf (>= 0.5) | debconf-2.0
Breaks: ca-certificates-java (<< 20121112+nmu1)
Enhances: openssl
Filename: pool/main/c/ca-certificates/ca-certificates_20190110~18.04.1_all.deb
Size: 145500
MD5sum: f0c73db6f5e857f13af04aaa736f87f0
SHA1: 8a3d4583491b426691a986ef11b1c805c2d4cf54
SHA256: fcfa84619207690491a3f9ab898de3fb2d46eeb7a73d525b91d05e7655815f5b
Description: Common CA certificates
Description-md5: e867d2a359bea1800b5bff209fc65bd1
Task: minimal
Supported: 5y

Package: ca-certificates
Architecture: all
Version: 20180409
Multi-Arch: foreign
Priority: important
Section: misc
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Michael Shuler <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 392
Depends: openssl (>= 1.1.0), debconf (>= 0.5) | debconf-2.0
Breaks: ca-certificates-java (<< 20121112+nmu1)
Enhances: openssl
Filename: pool/main/c/ca-certificates/ca-certificates_20180409_all.deb
Size: 150932
MD5sum: eae40792673dcb994af86284d0a01f36
SHA1: 8ac5ac1506810b0483f0b80b0652071348459fc4
SHA256: 195ffe05ae7d060146f890b1db225f5e8c3a8c505ffbea1fba30a520a1cd58d8
Description: Common CA certificates
Description-md5: e867d2a359bea1800b5bff209fc65bd1
Task: minimal
Supported: 5y

$ apt-cache show openssl
Package: openssl
Architecture: armhf
Version: 1.1.1-1ubuntu2.1~18.04.6
Multi-Arch: foreign
Priority: important
Section: utils
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian OpenSSL Team <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 986
Depends: libc6 (>= 2.15), libssl1.1 (>= 1.1.1)
Suggests: ca-certificates
Filename: pool/main/o/openssl/openssl_1.1.1-1ubuntu2.1~18.04.6_armhf.deb
Size: 589160
MD5sum: 37a31fce651134a5b057c9f6f356aaf2
SHA1: 476816221f03bae71ecd760e1e4e6d155f85e7c1
SHA256: 2787b66aba181e230f36ce49600b3a7d9dea7695aa332da0496a5e1a62281d39
Homepage: https://www.openssl.org/
Description: Secure Sockets Layer toolkit - cryptographic utility
Description-md5: 9b6de2bb6e1d9016aeb0f00bcf6617bd
Task: minimal
Supported: 5y

Package: openssl
Architecture: armhf
Version: 1.1.0g-2ubuntu4
Multi-Arch: foreign
Priority: important
Section: utils
Origin: Ubuntu
Maintainer: Ubuntu Developers <email address hidden>
Original-Maintainer: Debian OpenSSL Team <email address hidden>
Bugs: https://bugs.launchpad.net/ubuntu/+filebug
Installed-Size: 883
Depends: libc6 (>= 2.15), libssl1.1 (>= 1.1.0)
Suggests: ca-certificates
Filename: pool/main/o/openssl/openssl_1.1.0g-2ubuntu4_armhf.deb
Size: 509616
MD5sum: 0645cdd015e63ab37fcebf6b5c81b823
SHA1: 89852170f97d4dc2e6a0e83b045318fd05342634
SHA256: 57adec97bf6dec47c6079ea8b94598e853334e99c88c5e86afa838cbc57fcd32
Homepage: https://www.openssl.org/
Description: Secure Sockets Layer toolkit - cryptographic utility
Description-md5: 9b6de2bb6e1d9016aeb0f00bcf6617bd
Task: minimal
Supported: 5y
```

[Jeffrey Walton (noloader)]

I think I incorrectly filed this against OpenSSL. I think it should be the ca-certificates package.

[Seth Arnold (seth-arnold)]

Hello Jeffrey, this is quite surprising; what's your PATH look like in the shell where you performed this update? I'm curious if you may have a locally-supplied openssl that is shadowing the system-provided openssl binary.

Can you include the output from:

apt policy openssl
debsums -sa openssl

Thanks

[Marc Deslauriers (mdeslaur)]

What's the output of "openssl version -a"?