HAProxy error after upgrade to 23.05.01
-
After upgrading to pfsense from 23.05 to 23.05.01 I get this error message when making changes to HAproxy.
[WARNING] (45682) : dlopen(): shared library '/lib/libcrypto.so.111' brings a different and inconsistent definition of symbol 'OPENSSL_init_ssl'. The process cannot be trusted anymore! [WARNING] (45682) : dlopen(): shared library '/lib/libcrypto.so.111' brings a different and inconsistent definition of symbol 'SSL_CTX_get0_security_ex_data'. The process cannot be trusted anymore!When downgrading back to 23.05 I don't see the error any more so I believe there is something in the upgrade that is causing the error.
Any insight as to what is happening?
Thanks
-
I can second this error - except I was already on 23.05.01 and I updated HAProxy to the latest version and now I get this error
-
Hmm, what haproxy version were you on that wasn't hitting this?
-
@stephenw10 said in HAProxy error after upgrade to 23.05.01:
Hmm, what haproxy version were you on that wasn't hitting this?
The version prior to upgrading is 0.62_13 for haproxy-devel.
After backing out the upgrade there are three packages upgrades available. Acme current version 0.7.4 goes to 0.7.5, haproxy-devel current version 0.62_13 goes to 0.63_1, and ovenvpn-client-export current version 1.8 goes to 1.9_1.
Just upgrading haproxy-devel also will cause the error message as I recall.
-
@stephenw10 said in HAProxy error after upgrade to 23.05.01:
Hmm, what haproxy version were you on that wasn't hitting this?
Exactly the same for me - I upgraded Openvpn-client-export first, and then Haproxy-devel, the second ugrade produced the error and now haproxy devel will not start
-
Ok, I see that. It looks to be something that was missed in the OpenSSL update. Digging...
-
Ok I'm failing to replicate it here locally? What sort of config do you have that's hitting it?
-
If you still get this try, moving from
haproxy-develtohaproxy. Thehaproxy-develyou were on in past versions is nowhaproxy.The version of
haproxyon 23.05.1 (now) has the same PHP/package code ashaproxy-develbuthaproxy-develis now on an even newer base version ofhaproxybinaries that may have other problems as it hasn't been tested as much (if at all). -
@stephenw10 said in HAProxy error after upgrade to 23.05.01:
Ok I'm failing to replicate it here locally? What sort of config do you have that's hitting it?
My configuration is a reverse proxy with a shared frontend and I think four domain names. Certs are from LetsEncrypt with Acme.
-
@stephenw10 said in HAProxy error after upgrade to 23.05.01:
Ok I'm failing to replicate it here locally? What sort of config do you have that's hitting it?
I will try that later today, thanks.
-
Sorry @stephenw10 I meant to reply to @jimp about trying the haproxy package instead of haproxy-devel
-
After downgrading from haproxy-devel to haproxy I upgraded to pfsense 23.05.01 and now I don't see the error anymore.
Thanks.
-
@jimp said in HAProxy error after upgrade to 23.05.01:
If you still get this try, moving from
haproxy-develtohaproxy. Thehaproxy-develyou were on in past versions is nowhaproxy.The version of
haproxyon 23.05.1 (now) has the same PHP/package code ashaproxy-develbuthaproxy-develis now on an even newer base version ofhaproxybinaries that may have other problems as it hasn't been tested as much (if at all).Swapping to HAProxy fixed the issue - thank you.
