由于旧的 CentOS6 机器和最近过期的 Let's Encrypt 根证书存在问题,我在网上找到了一个解决方案,即安装 CentOS7 的 OpenSSL-1.0.2k 补丁版本。这是我以前做过的事情,它总是能完美运行,然而,在一台特定的服务器上,当我安装此版本的 OpenSSL 时,由于某种原因,sshd 抛出了分段错误,现在它不会开始抛出此错误:
key_curve_nid_to_name: unsupported EC curve nid -1
/etc/init.d/sshd: line 128: 29710 Segmentation fault $SSHD $OPTIONS
因此,我尝试将 OpenSSL 降级到以前的版本,但由于 openssl1.0.2k 现在使用单独的包(openssl-libs),因此当我尝试降级时,只会收到此错误
[root@ ~]# yum downgrade openssl
Loaded plugins: fastestmirror
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
* epel: d2lzkl7pfhq30w.cloudfront.net
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 0:1.0.1e-58.el6_10 will be a downgrade
---> Package openssl.x86_64 1:1.0.2k-21.el6 will be erased
--> Finished Dependency Resolution
Dependencies Resolved
========================================================================================================================================================================================================
Package Arch Version Repository Size
========================================================================================================================================================================================================
Downgrading:
openssl x86_64 1.0.1e-58.el6_10 updates 1.5 M
Transaction Summary
========================================================================================================================================================================================================
Downgrade 1 Package(s)
Total download size: 1.5 M
Is this ok [y/N]: y
Downloading Packages:
openssl-1.0.1e-58.el6_10.x86_64.rpm | 1.5 MB 00:00
Running rpm_check_debug
Running Transaction Test
Transaction Check Error:
file /etc/pki/tls/openssl.cnf from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/.libcrypto.so.10.hmac from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/.libssl.so.10.hmac from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/libcrypto.so.10 from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/libssl.so.10 from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/lib4758cca.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libaep.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libatalla.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libcapi.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libchil.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libcswift.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libgmp.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libnuron.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libpadlock.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libsureware.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
file /usr/lib64/openssl/engines/libubsec.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
手动删除 openssl-libs 也不起作用,因为几乎所有东西都依赖它,包括 yum。
有人知道我在降级时如何忽略此依赖关系吗?或者也许安装旧版本而忽略是否安装了新版本?