echochio

還好OS 有先備份 .......
所以這告知 ...在做任何更新前最好備份 !!
要備份 !!!
要備份 !!! 
這很重要 !!!!!

就是 yum update 完後 

[root@eip ~]# yum
There was a problem importing one of the Python modules
required to run yum. The error leading to this problem was:

   /usr/lib/libssl.so.10: symbol private_ossl_minimum_dh_bits, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference

Please install a package which provides this module, or
verify that the module is installed correctly.

It's possible that the above module doesn't match the
current version of Python, which is:
2.6.6 (r266:84292, Aug 18 2016, 14:53:48)
[GCC 4.4.7 20120313 (Red Hat 4.4.7-17)]

If you cannot solve this problem yourself, please go to
the yum faq at:
  http://yum.baseurl.org/wiki/Faq

發現與 openssl 相關的都掛了 ...連 curl & wget 都掛了 ,,,,,,

[root@eip ~]# postfix
postfix: relocation error: /usr/lib/libssl.so.10: symbol private_ossl_minimum_dh_bits, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference
[root@eip ~]#  wget ftp://fr2.rpmfind.net/linux/centos/6.8/updates/i386/Packages/openssl-1.0.1e-48.el6_8.3.i686.rpm
wget: relocation error: /usr/lib/libssl.so.10: symbol private_ossl_minimum_dh_bits, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference
[root@eip ~]# curl ftp://fr2.rpmfind.net/linux/centos/6.8/updates/i386/Packages/openssl-1.0.1e-48.el6_8.3.i686.rpm
curl: relocation error: /usr/lib/libssl.so.10: symbol private_ossl_minimum_dh_bits, version libcrypto.so.10 not defined in file libcrypto.so.10 with link time reference
[root@eip ~]#

發現是 openssl 問題但是 yum 都不能用了.....只能用 RPM .....超麻煩的
查了一下版本都正常呀 ....

[root@eip ~]# find /usr/lib |grep libssl
/usr/lib/libssl3.so
/usr/lib/.libssl.so.1.0.1e.hmac
/usr/lib/libssl.so.10
/usr/lib/libssl.so.1.0.1e
/usr/lib/.libssl.so.10.hmac
/usr/lib/vmware-tools/lib64/libssl.so.1.0.1
/usr/lib/vmware-tools/lib64/libssl.so.1.0.1/libssl.so.1.0.1
/usr/lib/vmware-tools/lib32/libssl.so.1.0.1
/usr/lib/vmware-tools/lib32/libssl.so.1.0.1/libssl.so.1.0.1
[root@eip ~]# rpm -qa |grep openssl
openssl-1.0.1e-57.el6.i686

 

看一下相依的程式 .....嘗試移除 openssl 當然不會讓你移除 .......

[root@eip ~]  # rpm -e openssl
error: Failed dependencies:
        libcrypto.so.10 is needed by (installed) fipscheck-1.2.0-7.el6.i686
        libcrypto.so.10 is needed by (installed) opal-3.6.6-4.el6.i686
        libcrypto.so.10 is needed by (installed) python-ldap-0:2.3.10-1.el6.i686
        libcrypto.so.10 is needed by (installed) qt-1:4.6.2-28.el6_5.i686
        libcrypto.so.10 is needed by (installed) ekiga-3.2.6-4.el6.i686
        libcrypto.so.10 is needed by (installed) compat-openldap-1:2.3.43-2.el6.i686
        libcrypto.so.10 is needed by (installed) cyrus-sasl-2.1.23-15.el6_6.2.i686
        libcrypto.so.10 is needed by (installed) cyrus-sasl-md5-2.1.23-15.el6_6.2.i686
        libcrypto.so.10 is needed by (installed) ppp-2.4.5-33.0.rhel6.i686
        libcrypto.so.10 is needed by (installed) pyOpenSSL-0.13.1-2.el6.i686
        libcrypto.so.10 is needed by (installed) libssh2-1.4.2-2.el6_7.1.i686
        libcrypto.so.10 is needed by (installed) gnome-vfs2-2.24.2-8.el6.i686
        libcrypto.so.10 is needed by (installed) gnome-vfs2-smb-2.24.2-8.el6.i686
        libcrypto.so.10 is needed by (installed) dovecot-1:2.0.9-22.el6.i686
        libcrypto.so.10 is needed by (installed) ptlib-2.6.5-5.el6.i686
        libcrypto.so.10 is needed by (installed) python-libs-2.6.6-66.el6_8.i686
        libcrypto.so.10 is needed by (installed) libarchive-2.8.3-7.el6_8.i686
        libcrypto.so.10 is needed by (installed) perl-Net-SSLeay-1.35-10.el6_8.1.i686
        libcrypto.so.10 is needed by (installed) perl-DBD-MySQL-4.013-3.el6.i686
        libcrypto.so.10 is needed by (installed) gstreamer-plugins-bad-free-0.10.19-5.el6_8.i686
        libcrypto.so.10 is needed by (installed) libopendkim-


.....一大堆 .......

是不是 yum 裝了不該裝的 ? 看還好呀 !!! 只是多了 nginx.repo 應該不是這問題

# ls -l /etc/yum.repos.d/
total 28
-rw-r--r-- 1 root root 1991 Mar 28 18:24 CentOS-Base.repo
-rw-r--r-- 1 root root  647 Mar 28 18:24 CentOS-Debuginfo.repo
-rw-r--r-- 1 root root  289 Mar 28 18:24 CentOS-fasttrack.repo
-rw-r--r-- 1 root root  630 Mar 28 18:24 CentOS-Media.repo
-rw-r--r-- 1 root root 7989 Mar 28 18:24 CentOS-Vault.repo
-rw-r--r-- 1 root root  109 May 17 14:44 nginx.repo

看來可能是 bug 吧 ....或許是吧 .......
先到別台機器下載 openssl 舊版在複製過來再安裝吧 ....
不要問我為啥要用別台下載 ....不是說 wget & curl 都壞了嗎 ?

[root@127 ~]# wget ftp://fr2.rpmfind.net/linux/centos/6.8/updates/i386/Packages/openssl-1.0.1e-48.el6_8.4.i686.rpm
--2017-06-03 09:34:07--  ftp://fr2.rpmfind.net/linux/centos/6.8/updates/i386/Packages/openssl-1.0.1e-48.el6_8.4.i686.rpm
           => “openssl-1.0.1e-48.el6_8.4.i686.rpm”
Resolving fr2.rpmfind.net... 195.220.108.108
Connecting to fr2.rpmfind.net|195.220.108.108|:21... connected.
Logging in as anonymous ... Logged in!
==> SYST ... done.    ==> PWD ... done.
==> TYPE I ... done.  ==> CWD (1) /linux/centos/6.8/updates/i386/Packages ... done.
==> SIZE openssl-1.0.1e-48.el6_8.4.i686.rpm ... 1590452
==> PASV ... done.    ==> RETR openssl-1.0.1e-48.el6_8.4.i686.rpm ... done.
Length: 1590452 (1.5M) (unauthoritative)

100%[=================================================================================================================================================================>] 1,590,452    822K/s   in 1.9s

2017-06-03 09:34:12 (822 KB/s) - “openssl-1.0.1e-48.el6_8.4.i686.rpm” saved [1590452]

[root@127 ~]#




[root@eip ~]# scp root@192.168.0.127:~/openssl-1.0.1e-48.el6_8.4.i686.rpm .
root@192.168.0.127's password:
openssl-1.0.1e-48.el6_8.4.i686.rpm                                                                                                                                       100% 1553KB   1.5MB/s   00:00
[root@eip ~]#





[root@eip ~]# rpm -ivh --force --nodeps openssl-1.0.1e-48.el6_8.4.i686.rpm
Preparing...                ########################################### [100%]
   1:openssl                ########################################### [100%]

[root@eip ~]# 

 

在正式機更新前加例外不去更新 openssl 就好了

更改  /etc/yum.conf 加入 exclude 有 openssl* 如 :

exclude=kernel* redhat-release* openssl*