Uploaded image for project: 'RHEL'
  1. RHEL
  2. RHEL-30133

Upgrading from RHEL 9 to RHEL 10 fails on /usr/lib64/ossl-modules/fips.so conflict

Linking RHIVOS CVEs to...Migration: Automation ...SWIFT: POC ConversionSync from "Extern...XMLWordPrintable

    • None
    • None
    • 2
    • rhel-security-crypto
    • ssg_security
    • 19
    • 26
    • 1
    • QE ack, Dev ack
    • False
    • False
    • Hide

      None

      Show
      None
    • No
    • Crypto24Q2, Crypto24Q3
    • Hide

      AC1) Manual: openssl-fips-provider package is in RHEL-10

      AC2) Manual: Upgrade openssl form RHEL-9 to RHEL-10 succeeds

      Show
      AC1) Manual: openssl-fips-provider package is in RHEL-10 AC2) Manual: Upgrade openssl form RHEL-9 to RHEL-10 succeeds
    • Pass
    • Not Needed
    • None
    • Release Note Not Required
    • None

      Upgrading RHEL 9.4 to RHEL 10.0 fails for me:

      # dnf upgrade openssl-libs --allowerasing --best
      Last metadata expiration check: 0:20:55 ago on Fri 22 Mar 2024 03:22:26 PM CET.
      Dependencies resolved.
      =======================================================================================================
       Package                 Architecture     Version                  Repository                     Size
      =======================================================================================================
      Upgrading:
       openssl                 x86_64           1:3.2.1-3.el10           rhel-10.0-baseos              1.1 M
       openssl-devel           x86_64           1:3.2.1-3.el10           rhel-10.0-appstream           2.7 M
       openssl-libs            x86_64           1:3.2.1-3.el10           rhel-10.0-baseos              2.3 M
      
      Transaction Summary
      =======================================================================================================
      Upgrade  3 Packages
      
      Total size: 6.1 M
      Is this ok [y/N]: yes
      Downloading Packages:
      [SKIPPED] openssl-3.2.1-3.el10.x86_64.rpm: Already downloaded                                         
      [SKIPPED] openssl-libs-3.2.1-3.el10.x86_64.rpm: Already downloaded                                    
      [SKIPPED] openssl-devel-3.2.1-3.el10.x86_64.rpm: Already downloaded                                   
      Running transaction check
      Transaction check succeeded.
      Running transaction test
      The downloaded packages were saved in cache until the next successful transaction.
      You can remove cached packages by executing 'dnf clean packages'.
      Error: Transaction test error:
        file /usr/lib64/ossl-modules/fips.so from install of openssl-libs-1:3.2.1-3.el10.x86_64 conflicts with file from package openssl-fips-provider-3.0.7-2.el9.x86_64
      

      I guess openssl-libs-1:3.2.1-3.el10 is missing "Obsolete: openssl-fips-provider < 3.0.7-3"

              rh-ee-gpantela Georgios Stavros Pantelakis
              rhn-support-ppisar Petr Pisar
              Dmitry Belyavskiy Dmitry Belyavskiy
              Georgios Stavros Pantelakis Georgios Stavros Pantelakis
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: