Scribe error='libssl.so.1.1: wrong ELF class: ELFCLASS32'

[elorimer]

Isn't this our old friend the PATH statement?

https://www.snbforums.com/threads/s...ms-_dont_-need-to-be-explicitly-called.83537/

Scribe - Entware coreutils-uname breaks scribe installer

After upgrading to Merlin FW 386.4, the scribe script no longer executes the installer. Because the error screen bails so quickly, users attempting to install via amtm never see the error. I ran through the steps manually to see a warning that the script requires ASUSWRT-Merlin w/ Entware...

www.snbforums.com

 

[ryzhov_al]

The last Entware update brings a lot of changes, including new OpenSSL version.
And it can brings a headache when your openssl-dependent packages are not updated as well. Details is here.

Sorry for this mess, looks like I've got nothing to do on my side, it's up to opkg internal logics.

 

[archiel]

Isn't this our old friend the PATH statement?

https://www.snbforums.com/threads/s...ms-_dont_-need-to-be-explicitly-called.83537/

Scribe - Entware coreutils-uname breaks scribe installer

After upgrading to Merlin FW 386.4, the scribe script no longer executes the installer. Because the error screen bails so quickly, users attempting to install via amtm never see the error. I ran through the steps manually to see a warning that the script requires ASUSWRT-Merlin w/ Entware...

www.snbforums.com

Not sure that it is. The issue is not that Scribe will not install, rather that it will not run. The paths are described in

Spoiler: S01syslog-ng

#!/bin/sh

ENABLED=yes
PROCS=syslog-ng
ARGS=""
PREARGS=""
DESC=$PROCS
PATH=/opt/sbin:/opt/bin:/opt/usr/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin

. /opt/etc/init.d/rc.func.syslog-ng # added by scribe

. /opt/etc/init.d/rc.func

Which makes me think that Scribe is looking for the entware version of the OpenSSL libraries and is not currently compatible with the new one
I could of course be completely wrong

 

[Martineau]

The issue is not that Scribe will not install, rather that it will not run.

On my RT-AX86_Pro, Uninstall/re-Install does allow Scribe to start and be basically functional despite the .conf version check error?

but the version check needs to be fixed.

 

[ColDen]

On my RT-AX86_Pro, Uninstall/re-Install does allow Scribe to start and be basically functional despite the .conf version check error?

View attachment 48597

but the version check needs to be fixed.


View attachment 48599

Same on my GT-AX6000 (I also did it with Scribe, as Martineau, yesterday).

 

[JGrana]

Yes, I agree with @dave14305 and it's a best practice to have in general, particularly if you have several Entware services running continuously on the router and not just utilities that are executed manually and on demand.

The following is a simple function and associated alias that I always use when upgrading Entware packages (I don't use AMTM for that).

_UpgradeEntware_()
{
    EntwOPT_opkg="/opt/bin/opkg"
    EntwOPT_init="/opt/etc/init.d/rc.unslung"
    if [ ! -x "$EntwOPT_opkg" ] || [ ! -x "$EntwOPT_init" ]
    then echo "Entware *NOT* found. Nothing to do." ; return 1 ; fi

    echo "Stopping Entware services... Please wait."
    $EntwOPT_init stop ; sleep 3 ; echo
    echo
    $EntwOPT_opkg update ; $EntwOPT_opkg upgrade
    echo
    echo "Starting Entware services... Please wait."
    $EntwOPT_init start ; sleep 3 ; echo
    echo "Done."
}
alias ewupgrade='_UpgradeEntware_'

It's all included in my "/jffs/configs/profile.add" file so I can easily run it by simply typing from an SSH terminal window:

ewupgrade

Just my 2 cents.

@thelonelycoder , this might be a useful add to amtm.

 

[archiel]

Apparently I was completely wrong (again)! It is now running on my RT-AX88U

Moving forward, is the version check relevant to the error message / problem and/or why is syslog-ng reporting an error with libssl.so.1.1 (in /usr.lib/) and not finding (using) libssl.so.3 in /opt/lib?

 

[John Fitzgerald]

Has anyone noticed a drop in nvram usage after the Entware update?

 

[_me_myself_and_i_]

FYI - ntpMerlin also breaks after upgrading. Same issue where it's trying to load 32bit libssl.so.1.1 from /usr/lib

 

[thelonelycoder]

Yes, I agree with @dave14305 and it's a best practice to have in general, particularly if you have several Entware services running continuously on the router and not just utilities that are executed manually and on demand.

The following is a simple function and associated alias that I always use when upgrading Entware packages (I don't use AMTM for that).

_UpgradeEntware_()
{
    EntwOPT_opkg="/opt/bin/opkg"
    EntwOPT_init="/opt/etc/init.d/rc.unslung"
    if [ ! -x "$EntwOPT_opkg" ] || [ ! -x "$EntwOPT_init" ]
    then echo "Entware *NOT* found. Nothing to do." ; return 1 ; fi

    echo "Stopping Entware services... Please wait."
    $EntwOPT_init stop ; sleep 3 ; echo
    echo
    $EntwOPT_opkg update ; $EntwOPT_opkg upgrade
    echo
    echo "Starting Entware services... Please wait."
    $EntwOPT_init start ; sleep 3 ; echo
    echo "Done."
}
alias ewupgrade='_UpgradeEntware_'

It's all included in my "/jffs/configs/profile.add" file so I can easily run it by simply typing from an SSH terminal window:

ewupgrade

Just my 2 cents.

Good points. Would be nice if opkg would have an option to stop/start a service when updating.
If you don’t mind I‘ll code it into amtm with the next update.

 

[archiel]

FYI - ntpMerlin also breaks after upgrading. Same issue where it's trying to load 32bit libssl.so.1.1 from /usr/lib

Are you using ntp or chrony? I am using the latter and it appears to be working normally.

 

[XxUnkn0wnxX]

no need to mess around with restoring from a backup, just downgrade the packages with opkg

on my GT-AX11000

I found my own workaround for scribe, 1st run scribe script & Stop syslog-ng & logrotate cron
then edit /opt/etc/syslog-ng.conf
and change the version number from "@version: 3.38" to "@version: 3.37"
then fetch these in some temp folder on ur USB drive..

wget https://bin.entware.net/aarch64-k3.10/archive/syslog-ng_3.37.1-1_aarch64-3.10.ipk
wget https://bin.entware.net/aarch64-k3.10/archive/libopenssl_1.1.1s-1_aarch64-3.10.ipk

then run

opkg install libopenssl_1.1.1s-1_aarch64-3.10.ipk --force-downgrade
opkg install syslog-ng_3.37.1-1_aarch64-3.10.ipk --force-downgrade

then start up scribe again.
I'm not sure if entware's "aarch64-k3.10" is the same for all asus routers though you may need to find where your package manager downloads from in order to fetch the right archived package for your specific model.

if you run

opkg remove libopenssl

it won't remove however it will tell you what packages use "libopenssl"

like for me its

Spoiler: libopenssl Dependents

* print_dependents_warning: syslog-ng
* print_dependents_warning: openssh-sftp-server
* print_dependents_warning: libcurl
* print_dependents_warning: bind-libs
* print_dependents_warning: python3-openssl

& if you have any other scripts that install anything else that also uses "libopenssl" you can downgrade each of these packages till your broken script works again
you just need to dig through entwares archives.

 

[elorimer]

Just to be clear, I don't think this is a problem with Scribe, the add on script; put another way, I don't think there is a fix to be done in scribe. And I don't think syslog-ng itself uses openssl at all, unless TLS is being used for a source or destination. But I think the problem might be buried in /opt/lib/syslog-ng/libhttp.so

 

[vaboro]

But I think the problem might be buried in /opt/lib/syslog-ng/libhttp.so

Which essentially means libhttp.so should be recompiled against OpenSSL3, and since it's included in syslog-ng, an upgrade to syslog-ng is needed, right?

 

[vaboro]

I see that quite a few packages depend on openssl in my environment:

# opkg whatdepends libopenssl
Root set:
  libopenssl
What depends on root set
    syslog-ng 3.38.1-1a    depends on libopenssl
    openssh-sftp-server 9.2p1-1    depends on libopenssl
    libcurl 7.86.0-1    depends on libopenssl
    nginx-ssl 1.21.3-3    depends on libopenssl
    bind-libs 9.18.11-3    depends on libopenssl
    python3-openssl 3.10.7-3    depends on libopenssl
    bind-dig 9.18.11-3    depends on bind-libs

I guess I have to take a leap of faith for now and assume they all have been recompiled against OpenSSL3.

 

[XIII]

Also ended up with a broken Entware after updating today.

Amongst others there were these two changes:

- wget-ssl               1.21.3-1  -> 1.21.3-2
- libopenssl             1.1.1s-1  -> 3.0.8-2

Looks like amtm/opkg updated wget-ssl before updating libopenssl and now wget-ssl is updated (and built against OpenSSL 3.0 and no longer working), before opkg could use it to update libopenssl... (I still see libopenssl - 1.1.1s-1 on my router)

 

[XIII]

Luckily wget is also included in the firmware, so I temporarily renamed /opt/bin/wget and changed https into http in /opt/etc/opkg.conf.

That way I could update libopenssl. After renaming wget again it does work.

However, I now also have the Scribe issue, so following this thread!

 

[XIII]

I'm afraid multiple items are broken:

➜ opkg whatdepends libopenssl
Root set:
  libopenssl
What depends on root set
    syslog-ng 3.38.1-1a depends on libopenssl
    libcurl 7.86.0-1    depends on libopenssl
    ntpd 4.2.8p15-4a    depends on libopenssl
    ntp-utils 4.2.8p15-4a   depends on libopenssl
    ...

These were all not in the list of packages to be updated... (I filtered out the ones that were)

 

[_me_myself_and_i_]

Are you using ntp or chrony? I am using the latter and it appears to be working normally.

I was using the former. For now I uninstalled and am using the firmware’s built in ntp.

 

[XIII]

My Entware got so corrupted by this update that I renamed /tmp/mnt/usb/entware/ and am now installing from scratch...