Nothing Provides libssl but Openssl is installed

[markfree]

I tried to install the Zabbix Agent2 7.0 on a Suse SLES 15.1 distro and got the error bellow.
Then, I noticed that Zabbix version 7.0 supports Suse 15.4+.

I then tried the Agent2 version 6.0, but got the same error. It seems that version 6.0 should be supported, since the doc suggests that Suse 15.1+ is supported.

$ sudo rpm -qa 'zabbix*'
zabbix-release-6.0-4.sles15.noarch

$ sudo zypper install zabbix-agent2
Loading repository data...
Reading installed packages...
Resolving package dependencies...

Problem: nothing provides libssl.so.1.1(OPENSSL_1_1_1)(64bit) needed by zabbix-agent2-6.0.33-release2.sles15.x86_64
Solution 1: do not install zabbix-agent2-6.0.33-release2.sles15.x86_64
Solution 2: break zabbix-agent2-6.0.33-release2.sles15.x86_64 by ignoring some of its dependencies

OpenSSL is installed with the latest version.

$ sudo zypper install openssl
Loading repository data...
Reading installed packages...
'openssl' is already installed.
No update candidate for 'openssl-1.1.0i-3.3.1.noarch'. The highest available version is already installed.

$ sudo rpm -qa '*ssl*'
openssl-1_1-1.1.0i-14.6.1.x86_64
libxmlsec1-openssl1-1.2.28-7.5.1.x86_64
libopenssl1_1-1.1.0i-14.6.1.x86_64
openssl-1.1.0i-3.3.1.noarch

So, I'm not sure why it fails. Any thoughts on this?

[kamil1]

Hi,
You might be right that version 15.1 is not supported. Same problem on my side. However, installation went smoothly on 15.4 as suggested here:

https://www.zabbix.com/download?zabbix=7.0&os_distribution=suse_linux_enterprise_server&os_version=15&components=server_frontend_agent&db=mysql&ws=apache

[tim.mooney]

doc suggests that Suse 15.1+ is supported.

Problem: nothing provides libssl.so.1.1(OPENSSL_1_1_1)(64bit) needed by zabbix-agent2-6.0.33-release2.sles15.x86_64

$ sudo rpm -qa '*ssl*'
openssl-1_1-1.1.0i-14.6.1.x86_64
libxmlsec1-openssl1-1.2.28-7.5.1.x86_64
libopenssl1_1-1.1.0i-14.6.1.x86_64
openssl-1.1.0i-3.3.1.noarch

It looks like the docs are out of date. The recent release of zabbix-agent2 that you're trying to install was linked against a slightly newer version of libssl. Your system's libssl is older and doesn't provide everything that the compiled version of zabbix-agent2 needs. It's possible that if you're not using any of the encryption functionality of zabbix-agent2 that the daemon might run, but I wouldn't recommend trying it unless you're desperate.

SuSE 15.1 is no longer supported by SuSE, so the Zabbix developers have probably switched to building the agent on a slightly newer version of SuSE that is still receiving updates.

You could try an older version of zabbix-agent2 from the 6.0.x series until you find one that was linked on a version of SuSE that works with your openssl, but when you install older versions of the agent or agent2 you don't have all current fixes, including fixes for security issues. Alternately, if you know how to build software on Linux, you could build your own package for zabbix-agent2 6.0.33 on SuSE 15.1. If it's compiled and linked on your system, it won't pick up symbol version dependencies that your libssl doesn't provide.

Library symbol versioning on Linux and other open platforms is a very complicated topic, but you can use tools like

$ objdump -p /usr/lib64/libssl.so.1.0.2k

and then look at the "Version definitions" section to see what versions your library provides. The "readelf' tool provides even more detailed info, especially with something like "-s --wide" specified, but it's not for the faint of heart.

[markfree]

Thanks for your insights.
I actually installed the latest version 5.0 and it works fine so far.
The company does have support for SuSE 15.1, but I think it might be an extended support.
The best thing to do would be to update the systems, so I've notified the owners.
Unfortunately, some still have the idea that if it works, don't change it.

[tim.mooney]

I agree about updating the system being the best option, long-term.

If you have experience building software on SuSE it probably wouldn't be too difficult to package your own build of 6.0.33, since you can start with the official Zabbix source RPM for zabbix-agent2. The source RPM contains the spec file (recipe) to build and package it. If you ever do go that route and you run into problems, if you post on these forums and I see it I'll try help. I have lots of experience with RPM and packaging software, including Zabbix, I don't have much experience with SuSE, though (my site is a Red Hat / RHEL shop currently) and I'm less experienced building and packaging Go software (zabbix-agent2 is mostly Go, other parts of Zabbix are mostly written in C).

Anyway, updating the system to a supported version is better, but if you go the "build your own agent2" route I'll try help. You've posted lots of stuff on these forums that's been useful to me, so I'm happy to try return the favor.

[markfree]

For this specific scenario I won't build the Agent2 because it's a trimmed production system and I can't change much on it. However, I really appreciate your help and I'm always glad to help as well.
I've tried some Zabbix building before when WSL did not have SystemD and it was quite fun actually. But I didn't go forward with that. (https://github.com/diasdmhub/Zabbix_WSL)