On 2015-11-02, Tichodroma <[email protected]> wrote: > Stuart Henderson <stu () spacehopper ! org> writes: > > > I'm not sure what happened here, there's no way that patch 007 would > > do this, and in any event EVP_mdc2 was removed before 5.8 so shouldn't > > be referenced by that sshd binary. > > > > Where did your base58 file come from? > > Hello Stuart. > > Thanks for your help. > > I downloaded: > - base58.tgz from http://ftp.fr.openbsd.org/pub/OpenBSD/5.8/amd64/ > - cd-src.tar.gz from http://ftp.fr.openbsd.org/pub/OpenBSD/5.8/ > > It appears to me now that other apps are broken, for instance wget: > wget:/usr/lib/libcrypto.so.35.0: undefined symbol 'ENGINE_load_rsax' > > As I wrote in a message that I now discover I never sent :-), though not > being a developer, I thought that all executables dynamically linked > with libcrypto would break. Wget behavior looks to me as a confirmation > of that.
No, programs dynamically linking to libcrypto will continue to work unless functions are removed from the library or their calling interface changes. The patch doesn't do either of those things, so should be no problem. When those things *are* done in a library, we change the library version number so that existing binaries will continue to use the old library, but we don't do that for errata patches. So I think your system is messed up somehow. Your symptoms are more like what would happen if you'd copied some old libcrypto.so.XX file to libcrypto.so.35.0 and locally built various apps against that. In your position I'd probably boot the 5.8 installer and do an 'upgrade' install over the top of your current system to make sure the files are correct for 5.8. Then forcibly reinstall all packages with # PKG_PATH=http://ftp.fr.openbsd.org/pub/OpenBSD/5.8/packages/amd64/ pkg_add -u -D installed > So, once again, I choose to: > - wipe out /usr/src/ > - put in place a fresh cd-src.tar.gz > - put in place base58.tgz > - not apply patches that failed for me: 001, 004 and 007. I've just downloaded http://ftp.fr.openbsd.org/pub/OpenBSD/5.8/cd-src.tar.gz and tried patching; all of the 5.8 patches successfully apply for me. $ sha256 -b cd-src.tar.gz SHA256 (cd-src.tar.gz) = dPH+mhrjIgrG3jC/aOIaMW9LtdekZejihIl3zwXzs/o=
