error on update-ca-certificates

10 posts / 0 new
Last post
#1 Wed, 2016-03-02 00:34
jaychris
  • jaychris's picture
  • Offline
  • Last seen: 2 years 1 month ago
  • Joined: 2016-03-02

I'm trying to add some intermediate certs to my Alpine setup, but getting this error:

bash-4.3# update-ca-certificates
Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found
Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found
run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127

I'm not exactly sure what it means in this context, though it seems to be a reference to OpenSSL.

I'm running Alpine 3.3.1. Any pointers would be greatly appreciated.

Mon, 2016-03-07 19:50
fsmontenegro
  • fsmontenegro's picture
  • Offline
  • Last seen: 2 years 3 weeks ago
  • Joined: 2016-03-07

Seeing same error here trying to simple openssl cert request.

uname -a
Linux fm-vm2 4.1.17-0-grsec #1-Alpine SMP Wed Feb 24 15:03:42 GMT 2016 x86_64 Linux

Any ideas?

Thanks!

Fernando

Tue, 2016-03-08 12:32
h0tbird
  • h0tbird's picture
  • Offline
  • Last seen: 1 year 10 months ago
  • Joined: 2016-03-08

I have the same problem:

# cat Dockerfile 
FROM alpine:3.3
RUN apk --no-cache add --update python ca-certificates && update-ca-certificates
CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"]
 
# docker build -t alpine-py/01 .
Sending build context to Docker daemon 2.048 kB
Step 1 : FROM alpine:3.3
 ---> 14f89d0e6257
Step 2 : RUN apk --no-cache add --update python ca-certificates && update-ca-certificates
 ---> Running in cc53e76b403e
fetch <a href="http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz
fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz
fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz
fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/main/x86_64/APKINDEX.tar.gz
fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz
fetch" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz
fetch</a> <a href="http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz
" rel="nofollow">http://dl-4.alpinelinux.org/alpine/v3.3/community/x86_64/APKINDEX.tar.gz
</a>(1/12) Installing openssl (1.0.2g-r0)
(2/12) Installing ca-certificates (20160104-r2)
(3/12) Installing libbz2 (1.0.6-r4)
(4/12) Installing expat (2.1.0-r2)
(5/12) Installing libffi (3.2.1-r2)
(6/12) Installing gdbm (1.11-r1)
(7/12) Installing ncurses-terminfo-base (6.0-r6)
(8/12) Installing ncurses-terminfo (6.0-r6)
(9/12) Installing ncurses-libs (6.0-r6)
(10/12) Installing readline (6.3.008-r4)
(11/12) Installing sqlite-libs (3.9.2-r0)
(12/12) Installing python (2.7.11-r3)
Executing busybox-1.24.1-r7.trigger
Executing ca-certificates-20160104-r2.trigger
OK: 53 MiB in 23 packages
Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found
Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found
run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127
The command '/bin/sh -c apk --no-cache add --update python ca-certificates && update-ca-certificates' returned a non-zero code: 1

Tue, 2016-03-08 12:45
h0tbird
  • h0tbird's picture
  • Offline
  • Last seen: 1 year 10 months ago
  • Joined: 2016-03-08

Seems to be solved in alpine:edge.
Find some info in this chat log: http://dev.alpinelinux.org/irclogs/%23alpine-commits-2016-03.log

Fri, 2016-03-18 12:19
diego.garcia
  • diego.garcia's picture
  • Offline
  • Last seen: 2 years 1 week ago
  • Joined: 2016-03-18

Still happening on alpine:3.3 and alpine:edge

Error relocating /usr/bin/c_rehash: SRP_VBASE_get1_by_user: symbol not found
Error relocating /usr/bin/c_rehash: SRP_user_pwd_free: symbol not found
run-parts: /etc/ca-certificates/update.d/c_rehash: exit status 127

Sun, 2016-03-20 19:16
GottZ
  • GottZ's picture
  • Offline
  • Last seen: 2 years 1 week ago
  • Joined: 2016-03-20

i figured it out.
the error happens if you use this image: gliderlabs/alpine:3.3
however it wont appear if you use this image: alpine:3.3

Thu, 2016-03-24 16:59
sblack
  • sblack's picture
  • Offline
  • Last seen: 2 years 1 week ago
  • Joined: 2016-03-24

@GottZ

the error will happen with alpine:3.3

FROM alpine:3.3
RUN apk --no-cache add --update python ca-certificates
RUN update-ca-certificates
CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"]

(this equates to Alpine 3.3.0)

Thu, 2016-03-24 17:09
sblack
  • sblack's picture
  • Offline
  • Last seen: 2 years 1 week ago
  • Joined: 2016-03-24

Just verified that the gliderlabs/alpine:3.3 image does work (this equates to alpine 3.3.1)

Thu, 2016-03-24 17:55
sblack
  • sblack's picture
  • Offline
  • Last seen: 2 years 1 week ago
  • Joined: 2016-03-24

This will also work with official Alpine 3.3. docker image

FROM alpine:3.3
RUN apk -U upgrade && \
    apk -U add python ca-certificates && \
    update-ca-certificates
CMD ["python", "-c", "import urllib2; response = urllib2.urlopen('https://www.python.org')"]
<code>
apk -U upgrade will pull upgrade these:
libcrypto1.0 (1.0.2e-r0 -> 1.0.2g-r0)
libssl1.0 (1.0.2e-r0 -> 1.0.2g-r0)

Sun, 2016-06-05 20:20
Egidijus
  • Egidijus's picture
  • Offline
  • Last seen: 1 year 9 months ago
  • Joined: 2015-12-18

I tried alpine 3:2, alpine 3:3 without any luck.
I even set the timezone.

Using alpine 3:4 seems to work.

When i say "work", I mean I can access https content, I am still unable to update certificates.
http://stackoverflow.com/questions/33353532/does-alpine-linux-handle-certs-differently-than-busybox/37645258#37645258

I suggest you change to alpine 3:4.

Log in or register to post comments