Issue Patching Secure Shell...

I'm trying to patch an HPUX 11i v3 machine. The file I'm installing is "HP_UX_11i_v3_SecureShell_A.06.20.030._HP-UX_B.11.31_IA_PA.depot".

I get the following output in the log:

 * Reading source for product information.
 *Reading source for file information.
          The corequisite
          "openssl.OPENSSL-LIB,r>=A.01.00.01i,a=HP-UX_B.11.31_IA/PA" for
          fileset "Secure_Shell.SECURE_SHELL,r=A.06.20.030" cannot be
          successfully resolved.
 ERROR:   The dependencies for fileset
          "Secure_Shell.SECURE_SHELL,r=A.06.20.030" cannot be resolved
          (see previous lines).
          You must resolve the above dependencies before operating on
          this fileset or change the "enforce_dependencies" option to
          "false".
        * Executing preDSA command.
 NOTE:    The used disk space on filesystem "/" is estimated to remain
          unchanged.
          This will leave 339560 Kbytes of available user disk space
          after the installation.
 NOTE:    The used disk space on filesystem "/opt" is estimated to
          increase by 416 Kbytes.
          This will leave 4417808 Kbytes of available user disk space
          after the installation.
 NOTE:    The used disk space on filesystem "/var" is estimated to
          increase by 176 Kbytes.
          This will leave 9260904 Kbytes of available user disk space
          after the installation.
  
        * Summary of Analysis Phase:
 ERROR:       Exclude       Secure_Shell.SECURE_SHELL,r=A.06.20.030
 ERROR:   1 of 2 filesets had Errors.
        * 1 of 2 filesets had no Errors or Warnings.
 ERROR:   The Analysis Phase had errors.  See the above output for
          details.
  
        * Beginning the Install Execution Phase.
        * Filesets:         1
        * Files:            441
        * Kbytes:           4855
        * Installing bundle "SecureShell,r=A.06.20.030" .
        * Installing fileset "Secure_Shell.SECSH-CMN,r=A.06.20.030" (1
          of 1).
 NOTE:    A new version of "/etc/rc.config.d/sshd" has been placed on
          the system. The new version is located at
          "/opt/ssh/newconfig/etc/rc.config.d/sshd".
          The existing version of "/etc/rc.config.d/sshd" is not being
          overwritten since it appears that it has been modified by the
          administrator since it was delivered.
 NOTE:    A new version of "/opt/ssh/etc/ssh_config" has been installed
          on the system.
 NOTE:    A new version of "/opt/ssh/etc/sshd_config" has been placed on
          the system. The new version is located at
          "/opt/ssh/newconfig/opt/ssh/etc/sshd_config".
          The existing version of "/opt/ssh/etc/sshd_config" is not
          being overwritten since it appears that it has been modified
          by the administrator since it was delivered.
  
        * Beginning the Configure Execution Phase.
 unknown key type ecdsa
 ERROR:   could not generate ECDSA host key
 ERROR:   The "configure" script for "Secure_Shell.SECSH-CMN" failed
          (exit code "1"). The script location was
          "/var/tmp/BAA003890/catalog/Secure_Shell/SECSH-CMN/configure".
        * This script had errors and the execution of this fileset
          cannot proceed until the problem is fixed.  Check the above
          output from the script for further details.
  
        * Summary of Execution Phase:
 ERROR:       Installed     Secure_Shell.SECSH-CMN,r=A.06.20.030
 ERROR:       Skipped (in analysis) Secure_Shell.SECURE_SHELL,r=A.06.20.030
 ERROR:   2 of 2 filesets had Errors.
 ERROR:   The Execution Phase had errors.  See the above output for
          details.
  
  
 =======  05/04/15 21:07:42 EDT  END install AGENT SESSION (pid=

To keep the forums high quality for all users, please take the time to format your posts correctly.

First of all, use Code Tags when you post any code or data samples so others can easily read your code. You can easily do this by highlighting your code and then clicking on the # in the editing menu. (You can also type code tags

```text
 and 
```

by hand.)

Second, avoid adding color or different fonts and font size to your posts. Selective use of color to highlight a single word or phrase can be useful at times, but using color, in general, makes the forums harder to read, especially bright colors like red.

Third, be careful when you cut-and-paste, edit any odd characters and make sure all links are working property.

Thank You.

The UNIX and Linux Forums

Hello chambo,

Welcome to forum, please use code tags as per forum rules for codes/commands/errors etc. http://www11.itrc.hp.com/service/cki/docDisplay.do?docLocale=en&docId=emr_na-c01743625-2
--
Starting with HP-UX Secure Shell A.05.10 and HP-UX 11.31, OpenSSL is a shared library and is not archived. Secure Shell on HP-UX 11.31 now depends on the System's OpenSSL Version installed, not the one it was linked with.
--
If I look at "new in this release" info
https://h20392.www2.hp.com/portal/swdepot/displayProductInfo.do?productNumber=T1471AA
OpenSSH 5.2 is now linked with OpenSSL A.00.09.8k instead of A.00.09.7m

What version of OpenSSL are you running?

ssh -V

EDIT: Also could you please post result for following command too.

openssl version

Thanks,
R. Singh

1 Like

Hi, and thank you for the reply. This is my first post ever regarding HPUX so please forgive me for not following the proper format. I will make the requested changes but I want to get this response back asap. I'm a Redhat admin recently taking over responsibility for HPUX servers. So, while not new to sysadmin new to HPUX.

I ran ssh -V and got the following:

OpenSSH_5.2p1+sftpfilecontrol-v1.3-hpn13v5, OpenSSL 0.98ze 15 Jan 2015
HP-UX Secure Shell-A.05.20.015, HP-UX Secure Shell version

Thank you R. Singh for the help!!!

---------- Post updated at 01:03 PM ---------- Previous update was at 11:35 AM ----------

So, I still don't understand why OpenSSH won't install. I see from the log it's complaining about the creation of a key type: ecdsn. So, apparently it has an issue with that. I'd greatly appreciate some additional help.