Failed to start nginx after ubuntu 16.04 server dist-upgrade

Discussion in 'Server Operation' started by Petter Neumann, May 28, 2018.

  1. Petter Neumann

    Petter Neumann New Member

    I have a server running nginx (compiled form source) The server have been runnig juist foen for a long while.
    Today, I dud a sudo update && sudo dist-upgrade + a reeboot. after reebot, nginx will nor start.
    The failure message is:
    /usr/sbin/nginx: error while loading shared libraries: libssl.so.1.0.2: cannot open shared object file: No such file or directory

    I does a
    openssl version -a
    Output:
    OpenSSL 1.1.0h 27 Mar 2018
    built on: reproducible build, date unspecified
    platform: debian-amd64
    options: bn(64,64) rc4(16x,int) des(int) blowfish(ptr)
    compiler: gcc -DDSO_DLFCN -DHAVE_DLFCN_H -DNDEBUG -DOPENSSL_THREADS -DOPENSSL_NO_STATIC_ENGINE -DOPENSSL_PIC -DOPENSSL_IA32_SSE2 -DOPENSSL_BN_ASM_MONT -DOPENSSL_BN_ASM_MONT5 -DOPENSSL_BN_ASM_GF2m -DSHA1_ASM -DSHA256_ASM -DSHA512_ASM -DRC4_ASM -DMD5_ASM -DAES_ASM -DVPAES_ASM -DBSAES_ASM -DGHASH_ASM -DECP_NISTZ256_ASM -DPADLOCK_ASM -DPOLY1305_ASM -DOPENSSLDIR="\"/usr/lib/ssl\"" -DENGINESDIR="\"/usr/lib/x86_64-linux-gnu/engines-1.1\""
    OPENSSLDIR: "/usr/lib/ssl"
    ENGINESDIR: "/usr/lib/x86_64-linux-gnu/engines-1.1"

    [email protected]:~# systemctl status nginx.service
    ‚óŹ nginx.service - A high performance web server and a reverse proxy server
    Loaded: loaded (/lib/systemd/system/nginx.service; enabled; vendor preset: en
    Active: failed (Result: exit-code) since ma. 2018-05-28 19:07:43 CEST; 10min
    Process: 4974 ExecStartPre=/usr/sbin/nginx -t -q -g daemon on; master_process

    It seems, after the upgrade, the system is now OpenSSL 1.1.0h and not libssl.so.1.0.2 as the error code indicates that nginx is looking for.
    Any help to solve this would be very welcome ASAP :) :)
     
  2. ztk.me

    ztk.me ISPConfig Developer ISPConfig Developer

    recompile with new libssl
     
  3. Petter Neumann

    Petter Neumann New Member

    Ok, but whei I want to get the compiler args and run
    nginx -V , nginx only returns the same error
    "nginx: error while loading shared libraries: libssl.so.1.0.2: cannot open shared object file: No such file or directory"
    How to find correct compile args ?
     
  4. Petter Neumann

    Petter Neumann New Member

    Ok, I found a note of compile args from initial "from source" compile & install and now everything is back online - Puhhh" happy now :)
     
    ztk.me likes this.
  5. ahrasis

    ahrasis Well-Known Member

    If you compile openssl, you can make use of openssl version 1.1.1 prev 7 that has better support for TLS1.3.
     
  6. Petter Neumann

    Petter Neumann New Member

    Thanks for the input. I will have a look at TLS1.3 later when time allows.
     

Share This Page