libk5crypto.so openssl error when updating php-fpm 7.4

Martijn6

Verified User
Joined
Jan 18, 2022
Messages
6
We tried updating PHP-FPM to version 7.4.28 but this results in an error:

Zend/zend_inheritance.lo Zend/zend_smart_str.lo Zend/zend_cpuinfo.lo Zend/zend_execute.lo main/internal_functions_cli.lo sapi/litespeed/lsapi_main.lo sapi/litespeed/lsapilib.lo -lcrypt -lresolv -lcrypt -lrt -lstdc++ -lrt -lm -ldl -lxml2 -lgssapi_krb5 -lkrb5 -lk5crypto -lcom_err -lssl -lcrypto -lsqlite3 -lz -lcurl -lxml2 -lssl -lcrypto -lz -lpng16 -lz -lwebp -ljpeg -lfreetype -licuio -licui18n -licuuc -licudata -lonig -lsqlite3 -lxml2 -lxml2 -lsodium -lcrypt -lxml2 -lxml2 -lxml2 -lxslt -lm -lxml2 -lexslt -lxslt -lm -lgcrypt -ldl -lgpg-error -lxml2 -lzip -lz -lssl -lcrypto -lcrypt -o sapi/litespeed/php
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_derive@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_ctrl@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_free@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_new_id@OPENSSL_1_1_1b'
collect2: error: ld returned 1 exit status
make: *** [Makefile:294: sapi/cli/php] Error 1
make: *** Waiting for unfinished jobs....
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_derive@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_ctrl@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_free@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_new_id@OPENSSL_1_1_1b'
collect2: error: ld returned 1 exit status
make: *** [Makefile:306: sapi/fpm/php-fpm] Error 1
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_derive@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_ctrl@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_free@OPENSSL_1_1_1b'
/usr/lib/gcc/x86_64-redhat-linux/8/../../../../lib64/libk5crypto.so: undefined reference to `EVP_KDF_CTX_new_id@OPENSSL_1_1_1b'
collect2: error: ld returned 1 exit status
make: *** [Makefile:334: sapi/litespeed/php] Error 1


# openssl version
OpenSSL 1.1.1k FIPS 25 Mar 2021

The current OpenSSL version is 1.1.1k. I'm not sure how we can update lib5crypto without messing things up, is there an easy way to do this?
 
could you provide some Information

what's your OS version ?

ldconfig -v | grep openssl
 
We are running Cloudlinux 8.5

# ldconfig -v | grep openssl
ldconfig: Path `/usr/lib64/mysql' given more than once
(from /etc/ld.so.conf.d/mysqlclient16-x86_64.conf:1 and /etc/ld.so.conf.d/mysqlclient15-x86_64.conf:1)
ldconfig: Can't stat /libx32: No such file or directory
ldconfig: Path `/usr/lib' given more than once
(from <builtin>:0 and <builtin>:0)
ldconfig: Path `/usr/lib64' given more than once
(from <builtin>:0 and <builtin>:0)
ldconfig: Can't stat /usr/libx32: No such file or directory
ldconfig: Cannot stat /lib/libidn.so: No such file or directory
ldconfig: Cannot stat /lib/libltdl.so: No such file or directory
libevent_openssl-2.1.so.6 -> libevent_openssl-2.1.so.6.0.2
 
provide more info

rpm -qa|grep ssl


maybe you have install some package that conflic with system openssl. like krb5 library or anyelse.

Result will symbolic link on openssl lib( *.so ) to their own openssl-libs package. This will broken with system openssl.
 
Thanks for your help so far

# rpm -qa|grep ssl
alt-openssl11-libs-1.1.1d-2.el8.x86_64
alt-libcurlssl-7.64.0-2.el8.x86_64
alt-curlssl11-7.71.0-4.el8.x86_64
openssl-devel-1.1.1k-5.el8_5.x86_64
alt-openssl-libs-1.0.2k-2.el8.cloudlinux.11.x86_64
alt-libcurlssl11-7.71.0-4.el8.x86_64
alt-nodejs16-openssl-libs-1.1.1b-3.el8.x86_64
openssl-1.1.1k-5.el8_5.x86_64
openssl-pkcs11-0.4.10-2.el8.x86_64
alt-nodejs16-openssl-1.1.1b-3.el8.x86_64
alt-openssl-1.0.2k-2.el8.cloudlinux.11.x86_64
openssl-libs-1.1.1k-5.el8_5.x86_64
alt-openssl11-1.1.1d-2.el8.x86_64
 
one more provide info, Normally I don't use cloudlinux, idk what's to do with that list package "alt-*"

ldconfig -v | grep "libk5crypto"
 
The alt packages are provided by cloudlinux

# ldconfig -v | grep "libk5crypto"
ldconfig: Path `/usr/lib64/mysql' given more than once
(from /etc/ld.so.conf.d/mysqlclient16-x86_64.conf:1 and /etc/ld.so.conf.d/mysqlclient15-x86_64.conf:1)
ldconfig: Can't stat /libx32: No such file or directory
ldconfig: Path `/usr/lib' given more than once
(from <builtin>:0 and <builtin>:0)
ldconfig: Path `/usr/lib64' given more than once
(from <builtin>:0 and <builtin>:0)
ldconfig: Can't stat /usr/libx32: No such file or directory
ldconfig: Cannot stat /lib/libidn.so: No such file or directory
ldconfig: Cannot stat /lib/libltdl.so: No such file or directory
libk5crypto.so.3 -> libk5crypto.so.3.1
 
Back
Top