由于 openssl-libs-1:1.0.2k-25.el6 依赖关系,无法将 OpenSSL 从 openssl-1.0.2k 降级到 openssl-1.0.1e-58

由于 openssl-libs-1:1.0.2k-25.el6 依赖关系,无法将 OpenSSL 从 openssl-1.0.2k 降级到 openssl-1.0.1e-58

由于旧的 CentOS6 机器和最近过期的 Let's Encrypt 根证书存在问题,我在网上找到了一个解决方案,即安装 CentOS7 的 OpenSSL-1.0.2k 补丁版本。这是我以前做过的事情,它总是能完美运行,然而,在一台特定的服务器上,当我安装此版本的 OpenSSL 时,由于某种原因,sshd 抛出了分段错误,现在它不会开始抛出此错误:

key_curve_nid_to_name: unsupported EC curve nid -1
/etc/init.d/sshd: line 128: 29710 Segmentation fault      $SSHD $OPTIONS

因此,我尝试将 OpenSSL 降级到以前的版本,但由于 openssl1.0.2k 现在使用单独的包(openssl-libs),因此当我尝试降级时,只会收到此错误

[root@ ~]# yum downgrade openssl
Loaded plugins: fastestmirror
Setting up Downgrade Process
Loading mirror speeds from cached hostfile
 * epel: d2lzkl7pfhq30w.cloudfront.net
Resolving Dependencies
--> Running transaction check
---> Package openssl.x86_64 0:1.0.1e-58.el6_10 will be a downgrade
---> Package openssl.x86_64 1:1.0.2k-21.el6 will be erased
--> Finished Dependency Resolution

Dependencies Resolved

========================================================================================================================================================================================================
 Package                                       Arch                                         Version                                                 Repository                                     Size
========================================================================================================================================================================================================
Downgrading:
 openssl                                       x86_64                                       1.0.1e-58.el6_10                                        updates                                       1.5 M

Transaction Summary
========================================================================================================================================================================================================
Downgrade     1 Package(s)

Total download size: 1.5 M
Is this ok [y/N]: y
Downloading Packages:
openssl-1.0.1e-58.el6_10.x86_64.rpm                                                                                                                                              | 1.5 MB     00:00
Running rpm_check_debug
Running Transaction Test


Transaction Check Error:
  file /etc/pki/tls/openssl.cnf from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/.libcrypto.so.10.hmac from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/.libssl.so.10.hmac from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/libcrypto.so.10 from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/libssl.so.10 from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/lib4758cca.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libaep.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libatalla.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libcapi.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libchil.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libcswift.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libgmp.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libnuron.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libpadlock.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libsureware.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64
  file /usr/lib64/openssl/engines/libubsec.so from install of openssl-1.0.1e-58.el6_10.x86_64 conflicts with file from package openssl-libs-1:1.0.2k-21.el6.x86_64

手动删除 openssl-libs 也不起作用,因为几乎所有东西都依赖它,包括 yum。

有人知道我在降级时如何忽略此依赖关系吗?或者也许安装旧版本而忽略是否安装了新版本?

相关内容