Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Reoccurence of NSS shared library not found in Suricata after firmware upgrade

    Scheduled Pinned Locked Moved IDS/IPS
    1 Posts 1 Posters 344 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      stkfrm
      last edited by

      After a recent firmware upgrade on Netgate SG-3100 (to 2.4.3-RELEASE-p1 (arm) built on Thu May 10 15:59:52 CDT 2018 FreeBSD 11.1-RELEASE-p10), Suricata service failed to start. Appears to be issue reported here back at beginning of year:

      https://forum.pfsense.org/index.php?topic=143146.0;all

      I see this:

      $ ldd /usr/local/bin/suricata |grep 'not found'
              libnss3.so => not found (0)
              libsmime3.so => not found (0)
              libssl3.so => not found (0)
              libnssutil3.so => not found (0)
      
      $ cat /usr/local/libdata/ldconfig/nss
      /usr/local/lib/nss
      
      $ ls -l /usr/local/lib/nss
      total 3004
      -rw-r--r--  1 root  wheel    86022 Mar 16 13:39 libcrmf.a
      -rw-r--r--  1 root  wheel     5560 Mar 16 13:39 libfreebl3.so
      -rw-r--r--  1 root  wheel   433652 Mar 16 13:39 libfreeblpriv3.so
      -rw-r--r--  1 root  wheel  1105524 Mar 16 13:39 libnss3.so
      -rw-r--r--  1 root  wheel   387600 Mar 16 13:39 libnssckbi.so
      -rw-r--r--  1 root  wheel   125628 Mar 16 13:39 libnssdbm3.so
      -rw-r--r--  1 root  wheel   150180 Mar 16 13:39 libnssutil3.so
      -rw-r--r--  1 root  wheel   142668 Mar 16 13:39 libsmime3.so
      -rw-r--r--  1 root  wheel   249696 Mar 16 13:39 libsoftokn3.so
      -rw-r--r--  1 root  wheel   275100 Mar 16 13:39 libssl3.so
      
      $ ldconfig -r | fgrep /usr/local/lib/nss
      $ 
      

      Like in the other thread, I ran /etc/rc.d/ldconfig start and success:

      $ ldd /usr/local/bin/suricata | grep '/usr/local/lib/nss'
              libnss3.so => /usr/local/lib/nss/libnss3.so (0x20500000)
              libsmime3.so => /usr/local/lib/nss/libsmime3.so (0x20617000)
              libssl3.so => /usr/local/lib/nss/libssl3.so (0x20642000)
              libnssutil3.so => /usr/local/lib/nss/libnssutil3.so (0x2068e000)
      
      $ suricata -V
      This is Suricata version 4.0.4 RELEASE
      

      Any ideas for a fix to this behavior?

      1 Reply Last reply Reply Quote 0
      • First post
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.