error on update-ca-certificates
#1
Wed, 2016-03-02 00:34
jaychris
-
- Offline
- 2 years 1 month ago
- 2016-03-02
I'm trying to add some intermediate certs to my Alpine setup, but getting this error:
bash-4.3# update-ca-certificates Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127
I'm not exactly sure what it means in this context, though it seems to be a reference to OpenSSL.
I'm running Alpine 3.3.1. Any pointers would be greatly appreciated.
Seeing same error here trying to simple openssl cert request.
uname -a
Linux fm-vm2 4.1.17-0-grsec #1-Alpine SMP Wed Feb 24 15:03:42 GMT 2016 x86_64 Linux
Any ideas?
Thanks!
Fernando
I have the same problem:
# cat Dockerfile FROM alpine:3.3 RUN apk --no-cache add --update python ca-certificates && update-ca-certificates CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"] # docker build -t alpine-py/01 . Sending build context to Docker daemon 2.048 kB Step 1 : FROM alpine:3.3 ---> 14f89d0e6257 Step 2 : RUN apk --no-cache add --update python ca-certificates && update-ca-certificates ---> Running in cc53e76b403e fetch <a href="http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz " rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz </a>(1/12) Installing openssl (1.0.2g-r0) (2/12) Installing ca-certificates (20160104-r2) (3/12) Installing libbz2 (1.0.6-r4) (4/12) Installing expat (2.1.0-r2) (5/12) Installing libffi (3.2.1-r2) (6/12) Installing gdbm (1.11-r1) (7/12) Installing ncurses-terminfo-base (6.0-r6) (8/12) Installing ncurses-terminfo (6.0-r6) (9/12) Installing ncurses-libs (6.0-r6) (10/12) Installing readline (6.3.008-r4) (11/12) Installing sqlite-libs (3.9.2-r0) (12/12) Installing python (2.7.11-r3) Executing busybox-1.24.1-r7.trigger Executing ca-certificates-20160104-r2.trigger OK: 53 MiB in 23 packages Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127 The command '/bin/sh -c apk --no-cache add --update python ca-certificates && update-ca-certificates' returned a non-zero code: 1Seems to be solved in alpine:edge.
Find some info in this chat log: http://dev.alpinelinux.org/irclogs/%23alpine-commits-2016-03.log
Still happening on alpine:3.3 and alpine:edge
Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found
Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found
run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127
i figured it out.
the error happens if you use this image:
gliderlabs/alpine:3.3however it wont appear if you use this image:
alpine:3.3@GottZ
the error will happen with alpine:3.3
FROM alpine:3.3 RUN apk --no-cache add --update python ca-certificates RUN update-ca-certificates CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"](this equates to Alpine 3.3.0)
Just verified that the gliderlabs/alpine:3.3 image does work (this equates to alpine 3.3.1)
This will also work with official Alpine 3.3. docker image
FROM alpine:3.3 RUN apk -U upgrade && \ apk -U add python ca-certificates && \ update-ca-certificates CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"] <code> apk -U upgrade will pull upgrade these: libcrypto1.0 (1.0.2e-r0 -> 1.0.2g-r0) libssl1.0 (1.0.2e-r0 -> 1.0.2g-r0)I tried alpine 3:2, alpine 3:3 without any luck.
I even set the timezone.
Using alpine 3:4 seems to work.
When i say "work", I mean I can access https content, I am still unable to update certificates.
http://stackoverflow.com/questions/33353532/does-alpine-linux-handle-certs-differently-than-busybox/37645258#37645258
I suggest you change to alpine 3:4.