SSL libraries on Ubuntu64 bit with PxPlus V10 64 bit

[Mike Hatfield]

Hi

Ubuntu latest version
PxPlus 10 64 bit

What is the procedure to install ssl library libssl.so.10
Thanks

[Mike King]

Which version Ubuntu?

If version 19 it was released after we finalized our development of PxPlus 2019 and it uses a new OpenSSL library that we don't support currently as some interface calls were changed.

We have a prototype under test in-house for the next release.

[Mike Hatfield]

Ubuntu version 18.04.3 and Pxplus version 10

THanks

[Mike King]

I can confirm that Version 10 was never tested on that version of Ubuntu as 18.04 came out in April 2018 and version 10 came out in 2013

As for the SSL libraries you would need to install the 32 bit OpenSSL on your system as PxPlus 10 only shipped as 32 bit.  You may have to search the Internet to see how to do this assuming it's even possible.

It would likely be better to upgrade to a newer supported 64 bit version of PxPlus.

[Devon Austen]

I believe Ubuntu 18 uses OpenSSL 1.1.0 which is not compatible with PxPlus yet (Will be support in PxPlus 2020). You would need to install a 32-bit version of OpenSSL 1.0.2 for PxPlus to work on this OS.

[Mike Hatfield]

Thanks guys.

I'll pass this on.
Funnily enough I did suggest upgrading to latest version a couple of weeks ago to avoid compatibility issues 

[Mike King]

Just for some background, the issue is that were code changes required between version 1.1.x of OpenSSL and version 1.0.x.  PxPlus currently supports OpenSSL 1.0.x and 0.98.x versions (for TLS1.2 you need OpenSSL 1.0.x)

From our perspective 1.1.0 added little functionality that the older version 1.0.x did not already provide.  TLS 1.3 was ultimately added in the 1.1.1 version of OpenSSL and that was released in September of last year.  TLS1.3 is not currently and, to the best of our knowledge, will not ever be supported in OpenSSL 1.0.x.

TLS 1.3 support will ultimately be important going forward but because of the code changes required between the 1.0.x and 1.1.x many Linux releases did not ship 1.1.x until recently.  For example Redhat 8 first came out with OpenSSL 1.1.x just this May and CENTOS 8 only came out with it last month (September 2019).   Ubuntu 18 was originally released with OpenSSL 1.1.0 however it was later updated to 1.1.1 once it was available.

As for us, we have made the code changes to PxPlus to support OpenSSL 1.1.x and to handle TLS1.3.  We have been testing these changes in house for the past month or so and plan to release them with PxPlus 2020.   Until that time make sure whatever Linux you install should use OpenSSL 1.0.x.

NOTE: For Windows we ship the OpenSSL libraries with PxPlus in order to assure compatibility.

[bmohrhardt]

Hello List :

         We are attempting to upgrade some of our Desktops to Ubuntu 18.04 LTS, which is only available in 64-bit. Prior to that, we used 14.04 and 16.04, both 32-bit, with no issues. We have installed the 32-bit architecture, and the 32-bit ssl libraries, but it still gives us grief. Do we have to apt purge the 64-bit SSL? We have been reluctant to try that, thinking that it might prevent other, legitimate,
programs from working. When we do a dpkg -l | grep openssl, we still get the "too new" 64-bit version :

root@33w9fx1:~# dpkg -l | grep openssl
ii  openssl                                    1.1.1-1ubuntu2.1~18.04.6

          Do we have to completely remove it? Or perhaps just create a symlink to the 32-bit one?

          Thanks,
          Bill.

[Devon Austen]

PxPlus V10 won't work with OpenSSL 1.1.1 32-bit or 64-bit.

PxPlus 2020 is needed for OpenSSL 1.1.1 support.

The newest version of OpenSSL that works with PxPlus v10 is 1.0.2

[bmohrhardt]

Sorry Devon, I should have been more specific.
This is copied directly from the pxpreg -v command :

Professional Serial 134938, 50 users, V15, Registered
   Flags:4010b032
Package 7587, Registered
   Runtime, Flags:01cf0032

We are on PxPlus Version 15!

Bill.

[Devon Austen]

Unfortunately OpenSSL 1.1.1 is very new, newer then PxPlus V15.

Only PxPlus 2020 (V17) can handle it.

As Mike mentioned earlier in this thread this is not due to us locking the feature but due to actual API changes in OpenSSL that are not compatible and required specific code to support.

[bmohrhardt]

Okay, thanks for the information.
How then, can we "tell" Ubuntu 18.04 to use an older version of SSL?
Do we have to install a 32-bit SSL, then make a symlink to tell 18.04 to use that old one?
The behaviour that we are getting now, in attempting to make an Ubuntu 18.04 (64-bit only) desktop communicate with our PxPlus V15.10 server, is that is does it, but it takes around 2 minutes to make the connection. Almost as if it is trying the SSL version that is too recent, then gives up, and eventually tries the older one? When we connect with Ubuntu 16.04 clients (those are 32-bit), they connect immediately.   Bill.

[Mike King]

There is really no 'Easy' way to run older OpenSSL on newer Ubuntu OS's.  Ubuntu, like virtually all Linux system, are shipped with the OS relying on OpenSSL and so changing the Openssl library isn't really very feasible.

Now I'm not certain I understand what exactly you are trying to do. 
What are you running on the Ubuntu Desktop that you are trying to connect to your server and how are trying to connect? 

[bmohrhardt]

Hello Mike :

        We are trying to get PxPlus V 15.10, with Windx 15.10 plugin, to connect to our PxPlus server. Like I said, it connects fine if the client is Ubuntu 16.04 (32-bit), no delay. We are currently creating Ubuntu 18.04 clients, and those are 64-bit only. The openssl version that comes with the Ubuntu 18.04 packages is 1.1.1. We followed a thread that we found online, and we now have an Ubuntu 18.04 client, that when we issue : openssl version, we get OpenSSL 1.0.2l  25 May 2017. So, in theory, we have an openssl version that is older than the "stock" version that comes with Ubuntu 18.04.5 LTS.
When we attempt to connect to our PxPlus server (which is CentOS 5.10 64-bit), it WILL connect, but takes a full 2 minutes to do so. Any other commands, telnet, ftp, ssh connect right away. We are using WINE 5.0.2 on the Ubuntu 18.04 client. At first, we tried the 64-bit WINE, but that would not connect at all, but the 32-bit WINE connects, but with the funky delay.   Thanks,  Bill.

[Mike King]

Bill,

The issue is how does Wine locate its SSL library?  When you run WindX under Wine we thin we are running in Windows thus we use the Windows Openssl libraries we ship with WindX and the Windows 'winsock' library replacement that comes with Wine.

I don't think the system uses the Ubuntu Openssl libraries at all when running WindX under Wine on Ubuntu.  WindX thinks it is on a Windows system and as such loads its own SSL libraries directly from the install -- and those simply require Windows Winsock.

Given that the issue you are likely having has to do with the 32 Bit Wine and whatever it is using.

I believe there is a 64 Bit Wine and that may be compatible with our 64 Bit WindX plugin.  A PxPlus 2020 WindX is designed to connect to older servers in order to allow clients to migrate their workstations before the host so that may be an option for you.