Socat Installation Error on RHEL 6.4 and Older

Symptom

New Galera Cluster deployment failed due to socat installation requires libcrypto.so.10(libcrypto.so.10):

192.168.1.39: Executing 'sync'[32m[ok][0m
192.168.1.39: Executing 'rpm -Uvh /root/s9s_tmp/epel-release-6-8.noarch.rpm'[32m[ok][0m
192.168.1.39: Executing 'yum install -y socat' [31m[failed: retrying 1/10][0m
[31m[failed: retrying 2/10][0m
[31m[failed: retrying 3/10][0m
[31m[failed: retrying 4/10][0m
[31m[failed: retrying 5/10][0m
[31m[failed: retrying 6/10][0m
[31m[failed: retrying 7/10][0m
[31m[failed: retrying 8/10][0m
[31m[failed: retrying 9/10][0m
[31m[failed: retrying 10/10][0m
[31m[failed][0m
Error: Package: socat-1.7.2.3-1.el6.x86_64 (epel) Requires: libcrypto.so.10(libcrypto.so.10)(64bit) Error: Package: socat-1.7.2.3-1.el6.x86_64 (epel) Requires: libssl.so.10(libssl.so.10)(64bit)
The following command failed:
ssh -q -q -p22 root@192.168.1.39 " yum install -y socat "
Try running the command on the line above again, contact http://support.severalnines.com/tickets/new, attach the output from deploy.sh and the error from running the command to the Support issue.

Explanation

This is a known issue affected RHEL 6.4 and older:

"Red Hat upgraded the version of OpenSSL in EL6 from 1.0.0 to 1.0.1 during the 6.4-6.5 cycle, in order to resolve a years-old feature request. This package is no longer binary compatible, and programs that were built against OpenSSL 1.0.0 must be rebuilt from source against 1.0.1."

So a lot of programs (like socat) has been rebuilt for 6.5 because of openssl upgrade from 1.0.0 to 1.0.1. This means that those programs will no longer work.

Solution

We suggest user who affected with this issue to use ius-archive repository and replace the installed openssl package. Run following commands on all nodes:

rpm -Uhv http://dl.iuscommunity.org/pub/ius/stable/Redhat/6/x86_64/epel-release-6-5.noarch.rpm
rpm -Uhv http://dl.iuscommunity.org/pub/ius/stable/Redhat/6/x86_64/ius-release-1.0-13.ius.el6.noarch.rpm
yum install yum-plugin-replace 
yum replace --enablerepo=ius-archive openssl --replace-with openssl10

(Press y for any question)

Verify the dependent libraries are exist (libcrypto.so.10 and libssl.so.10) :

ls /usr/lib64/ | grep -e ssl -e crypto

If the library files are there, remove the IUS and EPEL 6.5 release package. This will allow the deployment script to install latest EPEL repository 6.8:

rpm -e ius-release-1.0-13.ius.el6.noarch.rpm
rpm -e epel-release-6-5.noarch.rpm

** Above commands should be executed on all nodes (DB + ClusterControl)

Once done, restart the deployment script:

bash ./deploy.sh 2>&1 | tee cc.log