curl error - /usr/lib/libssl.so.7: Undefined symbol "EVP_aes_128_gcm"

[Tom Ierna]

Hello list,

I have two RootBSD instances, both upgraded to 10.0-RELEASE-p9 (when it was the newest available) from 8.x-ish.

Both are mail servers and have Spam Assassin installed. SA uses curl to update rules.

On one box, sa-update works fine, and on the other, sa-update fails with this error: /usr/lib/libssl.so.7: Undefined symbol "EVP_aes_128_gcm"

It’s actually curl generating the error. Even just issuing curl -V from the command line gives the error.

I’ve done a pkg update -f curl on the offending box, and that’s not fixed anything.

Both instances' /usr/lib/libssl.so.7 exist and has the same sum.

I’ve run "openssl speed -evp aes-128-gcm” on the offending box - I figured it would error out the same way, but it worked.

The library seems to have this symbol:

# readelf --syms /usr/lib/libssl.so.7 | grep aes
    41: 00000000    49 FUNC    GLOBAL DEFAULT  UND EVP_aes_192_cbc
   113: 00000000     7 FUNC    GLOBAL DEFAULT  UND EVP_aes_256_cbc_hmac_sha1
   180: 00000000     7 FUNC    GLOBAL DEFAULT  UND EVP_aes_128_cbc_hmac_sha1
   194: 00000000    49 FUNC    GLOBAL DEFAULT  UND EVP_aes_256_cbc
   292: 00000000    49 FUNC    GLOBAL DEFAULT  UND EVP_aes_256_gcm
   320: 00000000    49 FUNC    GLOBAL DEFAULT  UND EVP_aes_128_cbc
   342: 00000000    49 FUNC    GLOBAL DEFAULT  UND EVP_aes_128_gcm

I’m not in a position to do any deep upgrading of these instances unless in a controlled fashion.

Any thoughts as to what’s wrong and how I can get curl working?

Thanks,
-Tom

--
Tom Ierna