OpenSolaris derived ZFS NAS/ SAN (OmniOS, OpenIndiana, Solaris and napp-it)

You can call it Harakiri if you hot unplug one and onother disk from a hardware raid.
With ZFS the pool is mostly online again if enough disks come back.

Once my shaky SAS connexion unplugged and 16 drives out of 19 got disconnected. I started sweating a lot but it came back fine.
 
I received a napp-it alert this morning that my rpool capacity is low:

: -Low CAP ALERT 15%-
To: [email protected]

-disk errors: none


---------
CAP Alert
---------


------------------------------
zpool list (Sum of RAW disk capacity without redundancy counted)
------------------------------
NAME SIZE ALLOC FREE EXPANDSZ CAP DEDUP HEALTH ALTROOT
pool01 5.44T 1.05T 4.38T - 19% 1.00x ONLINE -
pool02 2.72T 517G 2.21T - 18% 1.00x ONLINE -
rpool 19.9G 14.5G 5.36G - 73% 1.00x ONLINE -

Real Pool capacity from zfs list
------------------------------
NAME USED AVAIL MOUNTPOINT %
pool01 1.06T 2.86T /pool01 73%
pool02 794G 2.17T /pool02 73%
rpool 16.6G 2.99G /rpool 15%!

Are there logs or something that would be taking up space that I can clear out?
 
It's most likely snapshots that are taking up the space. You can cleanup rpool snapshots from the Snapshots menu in Napp-it.
 
Yes there are logs, there is a command to run if you use napp-it on USB thumbdrives (I don't know it but you should be able to find it). 5GB free seems fine though.
 
First check for boot environments
(napp-it menu snapshots bootenvironments - and delete unneded ones )

Then check folder /root for files from last installations (napp-it, web-gui, smartmontools etc)
and delete them

Last are logfiles in /var/adm that you can delete but these are peanuts

One option is also to enable compress in rpool and copy files away and back to compress
But with 16 GB you always need to struggle for about 2-5 GB min free space even with a basic setup.
(16 GB is minimum, I suggest 20-30 GB)
 
Can I convert two spares to be a mirror VDEV within Napp-IT? I accidentally made two drives spares instead of mirrors.

EDIT: That worked _Gea, thanks man.
 
Last edited:
With napp-it, just open menu "Disks - SAS2 extension" where all disks are listed with
controller + enclosure + slot number and all other infos like capacity, pool/vdev, Product, WWN, serial and iostat errors.

Should this work with M1015 IT mode and BPN-SAS-836A? I am using SATA drives.
 
Can I convert two spares to be a mirror VDEV within Napp-IT? I accidentally made two drives spares instead of mirrors.

Remove the spares (you can remove spares, caches, logs and a mirrored disk)
Menu disks - remove

and add to the pool as a mirror
 
First check for boot environments
(napp-it menu snapshots bootenvironments - and delete unneded ones )

Then check folder /root for files from last installations (napp-it, web-gui, smartmontools etc)
and delete them

Last are logfiles in /var/adm that you can delete but these are peanuts

One option is also to enable compress in rpool and copy files away and back to compress
But with 16 GB you always need to struggle for about 2-5 GB min free space even with a basic setup.
(16 GB is minimum, I suggest 20-30 GB)

Thanks Gea. I'm running this under ESXi, so I decided to do a fresh install of OmniOS and napp-it with a larger size rpool. Problem solved.

However, I now have the issue of Gmail SMTP emails not getting sent out. I followed all the steps and everything should be configured correctly, but when I run the TLS test I get the following:

Code:
Software error:
Can't locate Net/SSLeay.pm in @INC (@INC contains: /var/web-gui/data/napp-it/CGI /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib . /var/web-gui/data/napp-it/zfsos/_lib/illumos /var/web-gui/_my/zfsos/_lib /var/web-gui/data/napp-it/zfsos/15_jobs and data services /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email) at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89.
BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89.
Compilation failed in require at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70.
BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70.
For help, please send mail to this site's webmaster, giving this error message and the time and date of the error.
Software error:
[Fri Jun  6 17:37:14 2014] admin.pl: Can't locate Net/SSLeay.pm in @INC (@INC contains: /var/web-gui/data/napp-it/CGI /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib . /var/web-gui/data/napp-it/zfsos/_lib/illumos /var/web-gui/_my/zfsos/_lib /var/web-gui/data/napp-it/zfsos/15_jobs and data services /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email) at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89.
[Fri Jun  6 17:37:14 2014] admin.pl: BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89.
[Fri Jun  6 17:37:14 2014] admin.pl: Compilation failed in require at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70.
[Fri Jun  6 17:37:14 2014] admin.pl: BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70.
Compilation failed in require at admin.pl line 538.
For help, please send mail to this site's webmaster, giving this error message and the time and date of the error.
[Fri Jun 6 17:37:14 2014] admin.pl: [Fri Jun 6 17:37:14 2014] admin.pl: Can't locate Net/SSLeay.pm in @INC (@INC contains: /var/web-gui/data/napp-it/CGI /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib . /var/web-gui/data/napp-it/zfsos/_lib/illumos /var/web-gui/_my/zfsos/_lib /var/web-gui/data/napp-it/zfsos/15_jobs and data services /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email) at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89. [Fri Jun 6 17:37:14 2014] admin.pl: [Fri Jun 6 17:37:14 2014] admin.pl: BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/CGI/Net/SMTP/TLS.pm line 89. [Fri Jun 6 17:37:14 2014] admin.pl: [Fri Jun 6 17:37:14 2014] admin.pl: Compilation failed in require at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70. [Fri Jun 6 17:37:14 2014] admin.pl: [Fri Jun 6 17:37:14 2014] admin.pl: BEGIN failed--compilation aborted at /var/web-gui/data/napp-it/zfsos/15_jobs and data services/04_TLS Email/09_TLS-test/action.pl line 70. [Fri Jun 6 17:37:14 2014] admin.pl: Compilation failed in require at admin.pl line 538.
 
For encrypted TLS Alert und Status-Mails over Googlemail you need to install net-ssleay
and the Perl module Net::SMTP::TLS manually.

The error message indicates that net-ssleay is not installed.

## Step 1: install net-ssleay
- check publisher:
pkg publisher
- if perl.omniti.com is missing: (net-ssleay is only in this repo not in the default one)

pkg set-publisher -g http://pkg.omniti.com/omniti-perl/ perl.omniti.com
pkg install net-ssleay

If TLS is missing, you need to install manually as well.

see:
(Enter the blue code parts at console as root)
napp-it // webbased ZFS NAS/SAN appliance for OmniOS, OpenIndiana, Solaris and Linux downloads
 
A quick question regarding power saving - I'm using NAPP-IT on Solaris 11 Express, with 20 2TB hard drives. I've got power management working, so all the drives spin down when not in use, which cuts power consumption from 180W to 80W - pretty nice at night (this is a home server). However, spin up takes FOREVER - it spins up each drive sequentially, not in parallel. Any way to force parallel spin up? Right now it takes about 8-10 seconds per drive, so that's a minute or two every time I need to wake the server back up, which gets annoying fast.

Drives are connected to an eight and sixteen port LSI 9201 card(s).

Thanks!

EDIT: Forgot to add: on power on of the entire system, all the drives spin up in parallel already.

A bit of a late reply, but I eventually got sick of the same spinup issue and tried various things including going raid 6, juggling multiple smaller raidz pools, unraid / snapraid but i really preferred the simplicity of one big RAIDZ pool. I finally just installed a simple script to manage spinup for me by monitoring disk i/o and starting all the drives in parallel as soon as the OS starts to spin one up. Tossed it on github if anybody needs it, though it probably needs to be tweaked for your specific environment.

https://github.com/eamonho/zfs-parallel-spinup/wiki
 
For encrypted TLS Alert und Status-Mails over Googlemail you need to install net-ssleay
and the Perl module Net::SMTP::TLS manually.

The error message indicates that net-ssleay is not installed.

## Step 1: install net-ssleay
- check publisher:
pkg publisher
- if perl.omniti.com is missing: (net-ssleay is only in this repo not in the default one)



If TLS is missing, you need to install manually as well.

see:
(Enter the blue code parts at console as root)
napp-it // webbased ZFS NAS/SAN appliance for OmniOS, OpenIndiana, Solaris and Linux downloads

Thanks again Gea.

I followed the guide on your website, but it's still not working for me. Maybe this is an issue on a fresh install of 9f1 on OmniOS r151010?

pkg publisher

Code:
omnios                                origin   online   http://pkg.omniti.com/omnios/r151010/
perl.omniti.com                       origin   online   http://pkg.omniti.com/omniti-perl/

pkg install net-ssleay

Code:
No updates necessary for this image.

##step2: Install CPAN modules (source of Perl modules)

perl -MCPAN -e shell
-> and answer yes when it asks if it should try to configure as much as possible by itself

at the cpan prompt, enter:
install Net::SMTP::TLS

Code:
cpan[1]> install Net::SMTP::TLS
Reading '/root/.cpan/Metadata'
  Database was generated on Fri, 06 Jun 2014 22:17:02 GMT
Running install for module 'Net::SMTP::TLS'
Checksum for /root/.cpan/sources/authors/id/A/AW/AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz ok
Scanning cache /root/.cpan/build for sizes
............................................................................DONE
'YAML' not installed, will not store persistent state
Configuring A/AW/AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz with Makefile.PL
Checking if your kit is complete...
Looks good
Warning: prerequisite IO::Socket::SSL 0 not found.
Warning: prerequisite Net::SSLeay 0 not found.
Writing Makefile for Net::SMTP::TLS
Writing MYMETA.yml and MYMETA.json
  AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
  /usr/perl5/5.16.1/bin/i386/perl Makefile.PL -- OK
Running make for A/AW/AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
---- Unsatisfied dependencies detected during ----
----    AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz    ----
    Net::SSLeay [requires]
    IO::Socket::SSL [requires]
Running install for module 'Net::SSLeay'
Checksum for /root/.cpan/sources/authors/id/M/MI/MIKEM/Net-SSLeay-1.63.tar.gz ok
Configuring M/MI/MIKEM/Net-SSLeay-1.63.tar.gz with Makefile.PL
*** Found OpenSSL-1.0.1h installed in /usr
*** Be sure to use the same compiler and options to compile your OpenSSL, perl,
    and Net::SSLeay. Mixing and matching compilers is not supported.
Do you want to run external tests?
These tests *will* *fail* if you do not have network connectivity. [n] 
Checking if your kit is complete...
Looks good
Writing Makefile for Net::SSLeay
Writing MYMETA.yml and MYMETA.json
  MIKEM/Net-SSLeay-1.63.tar.gz
  /usr/perl5/5.16.1/bin/i386/perl Makefile.PL -- OK
Running make for M/MI/MIKEM/Net-SSLeay-1.63.tar.gz
cp lib/Net/SSLeay.pm blib/lib/Net/SSLeay.pm
AutoSplitting blib/lib/Net/SSLeay.pm (blib/lib/auto/Net/SSLeay)
blib/lib/Net/SSLeay.pm: some names are not unique when truncated to 8 characters:
 directory blib/lib/auto/Net/SSLeay:
  do_https3.al, do_https2.al, do_https4.al, do_https.al truncate to do_https
  do_httpx3.al, do_httpx2.al, do_httpx4.al truncate to do_httpx
  get_https.al, get_https3.al, get_https4.al, get_http.al, get_http3.al, get_http4.al, get_httpx.al, get_httpx3.al, get_httpx4.al truncate to get_http
  head_https.al, head_https3.al, head_https4.al, head_http.al, head_http3.al, head_http4.al, head_httpx.al, head_httpx3.al, head_httpx4.al truncate to head_htt
  post_https.al, post_https3.al, post_https4.al, post_http.al, post_http3.al, post_http4.al, post_httpx.al, post_httpx3.al, post_httpx4.al truncate to post_htt
  put_https.al, put_https3.al, put_https4.al, put_http.al, put_http3.al, put_http4.al, put_httpx.al, put_httpx3.al, put_httpx4.al truncate to put_http
  ssl_read_all.al, ssl_read_until.al, ssl_read_CRLF.al truncate to ssl_read
  ssl_write_all.al, ssl_write_CRLF.al truncate to ssl_writ
  tcp_read_all.al, tcp_read_until.al, tcp_read_CRLF.al truncate to tcp_read
  tcp_write_all.al, tcp_write_CRLF.al truncate to tcp_writ
cp lib/Net/SSLeay.pod blib/lib/Net/SSLeay.pod
cp lib/Net/SSLeay/Handle.pm blib/lib/Net/SSLeay/Handle.pm
/usr/perl5/5.16.1/bin/i386/perl "-Iinc" /usr/perl5/5.16.1/lib/ExtUtils/xsubpp  -typemap /usr/perl5/5.16.1/lib/ExtUtils/typemap -typemap typemap  SSLeay.xs > SSLeay.xsc && mv SSLeay.xsc SSLeay.c
gcc -c  -I/usr/include  -D_REENTRANT -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -D_TS_ERRNO -DPTR_IS_LONG -fno-strict-aliasing -pipe -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -DPERL_USE_SAFE_PUTENV -O3    -DVERSION=\"1.63\"  -DXS_VERSION=\"1.63\" -fPIC "-I/usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int/CORE"   SSLeay.c
Running Mkbootstrap for Net::SSLeay ()
chmod 644 SSLeay.bs
rm -f blib/arch/auto/Net/SSLeay/SSLeay.so
LD_RUN_PATH="/usr/lib" /usr/ccs/bin/ld  -G -L/usr/gnu/lib SSLeay.o  -o blib/arch/auto/Net/SSLeay/SSLeay.so 	\
   -L/usr -L/usr/lib -lssl -lcrypto -lz  	\
  
chmod 755 blib/arch/auto/Net/SSLeay/SSLeay.so
cp SSLeay.bs blib/arch/auto/Net/SSLeay/SSLeay.bs
chmod 644 blib/arch/auto/Net/SSLeay/SSLeay.bs
Manifying blib/man3/Net::SSLeay.3
Manifying blib/man3/Net::SSLeay::Handle.3
  MIKEM/Net-SSLeay-1.63.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 /usr/perl5/5.16.1/bin/i386/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'inc', 'blib/lib', 'blib/arch')" t/local/*.t t/handle/local/*.t
t/handle/local/05_use.t ................ ok   
t/local/01_pod.t ....................... skipped: Test::Pod 1.00 required for testing POD
t/local/02_pod_coverage.t .............. skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING=1
t/local/03_use.t ....................... ok   
t/local/04_basic.t ..................... ok   
t/local/05_passwd_cb.t ................. ok     
t/local/06_tcpecho.t ................... ok   
t/local/07_sslecho.t ................... ok     
t/local/08_pipe.t ...................... ok     
t/local/15_bio.t ....................... ok   
t/local/20_autoload.t .................. skipped: Some tests need Test::Exception
t/local/21_constants.t ................. skipped: Some tests need Test::Exception
t/local/30_error.t ..................... skipped: Requires Test::Exception, Test::Warn and Test::NoWarnings
t/local/31_rsa_generate_key.t .......... skipped: Test::Exception required
t/local/32_x509_get_cert_info.t ........ ok         
t/local/33_x509_create_cert.t .......... 1/124 
#   Failed test 'X509_NAME_digest'
#   at t/local/33_x509_create_cert.t line 107.
#          got: 'ce83889f1beab8e70aa142e07e94b0ebbd9d59e0'
#     expected: '044d7ea7fddced7b9b63799600b9989a63b36819'
t/local/33_x509_create_cert.t .......... 46/124 # Looks like you failed 1 test of 124.
t/local/33_x509_create_cert.t .......... Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/124 subtests 
t/local/34_x509_crl.t .................. ok     
t/local/35_ephemeral.t ................. ok   
t/local/36_verify.t .................... ok     
t/local/37_asn1_time.t ................. ok     
t/local/38_priv-key.t .................. ok     
t/local/39_pkcs12.t .................... ok     
t/local/40_npn_support.t ............... ok   
t/local/41_alpn_support.t .............. skipped: openssl 1.0.2 required
t/local/50_digest.t .................... ok       
t/local/61_threads-cb-crash.t .......... ok   
t/local/62_threads-ctx_new-deadlock.t .. ok   
t/local/kwalitee.t ..................... skipped: these tests are for only for release candidate testing. Enable with RELEASE_TESTING=1

Test Summary Report
-------------------
t/local/33_x509_create_cert.t        (Wstat: 256 Tests: 124 Failed: 1)
  Failed test:  41
  Non-zero exit status: 1
Files=28, Tests=1835,  3 wallclock secs ( 0.20 usr  0.05 sys +  1.98 cusr  0.08 csys =  2.31 CPU)
Result: FAIL
Failed 1/28 test programs. 1/1835 subtests failed.
*** Error code 255
make: Fatal error: Command failed for target `test_dynamic'
  MIKEM/Net-SSLeay-1.63.tar.gz
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports MIKEM/Net-SSLeay-1.63.tar.gz
Running install for module 'IO::Socket::SSL'
Checksum for /root/.cpan/sources/authors/id/S/SU/SULLR/IO-Socket-SSL-1.992.tar.gz ok
Configuring S/SU/SULLR/IO-Socket-SSL-1.992.tar.gz with Makefile.PL

WARNING
No library for handling international domain names found.
It will work but croak if you try to verify an international name against
a certificate.
It's recommended to install either Net::IDN::Encode, Net::LibIDN or URI version>=1.50

Should I do external tests?
These test will detect if there are network problems and fail soft,
so please disable them only if you definitely don't want to have any
network traffic to external sites.   [Y/n] [y] 
Checking if your kit is complete...
Looks good
Warning: prerequisite Net::SSLeay 1.46 not found.
Writing Makefile for IO::Socket::SSL
Writing MYMETA.yml and MYMETA.json
  SULLR/IO-Socket-SSL-1.992.tar.gz
  /usr/perl5/5.16.1/bin/i386/perl Makefile.PL -- OK
Running make for S/SU/SULLR/IO-Socket-SSL-1.992.tar.gz
---- Unsatisfied dependencies detected during ----
----     SULLR/IO-Socket-SSL-1.992.tar.gz     ----
    Net::SSLeay [requires]
Running install for module 'Net::SSLeay'
  MIKEM/Net-SSLeay-1.63.tar.gz
  Has already been unwrapped into directory /root/.cpan/build/Net-SSLeay-1.63-wDKieq
  MIKEM/Net-SSLeay-1.63.tar.gz
  Has already been prepared
  MIKEM/Net-SSLeay-1.63.tar.gz
  Has already been made
  MIKEM/Net-SSLeay-1.63.tar.gz
  Won't repeat unsuccessful test during this command
  SULLR/IO-Socket-SSL-1.992.tar.gz
  Has already been unwrapped into directory /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp
  SULLR/IO-Socket-SSL-1.992.tar.gz
  Has already been prepared
Running make for S/SU/SULLR/IO-Socket-SSL-1.992.tar.gz
Warning: Prerequisite 'Net::SSLeay => 1.46' for 'SULLR/IO-Socket-SSL-1.992.tar.gz' failed when processing 'MIKEM/Net-SSLeay-1.63.tar.gz' with 'make_test => NO'. Continuing, but chances to succeed are limited.
cp lib/IO/Socket/SSL.pm blib/lib/IO/Socket/SSL.pm
cp lib/IO/Socket/SSL/PublicSuffix.pm blib/lib/IO/Socket/SSL/PublicSuffix.pm
cp lib/IO/Socket/SSL/Intercept.pm blib/lib/IO/Socket/SSL/Intercept.pm
cp lib/IO/Socket/SSL/Utils.pm blib/lib/IO/Socket/SSL/Utils.pm
Manifying blib/man3/IO::Socket::SSL::PublicSuffix.3
Manifying blib/man3/IO::Socket::SSL.3
Manifying blib/man3/IO::Socket::SSL::Utils.3
Manifying blib/man3/IO::Socket::SSL::Intercept.3
  SULLR/IO-Socket-SSL-1.992.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 /usr/perl5/5.16.1/bin/i386/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/external/*.t
t/01loadmodule.t .................. 1/3 
#   Failed test 'loaded'
#   at t/01loadmodule.t line 8.
Undefined subroutine &Net::SSLeay::OPENSSL_VERSION_NUMBER called at t/01loadmodule.t line 10.
# Looks like you planned 3 tests but ran 1.
# Looks like you failed 1 test of 1 run.
# Looks like your test exited with 2 just after 1.
t/01loadmodule.t .................. Dubious, test returned 2 (wstat 512, 0x200)
Failed 3/3 subtests 
t/acceptSSL-timeout.t ............. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/acceptSSL-timeout.t line 3.
BEGIN failed--compilation aborted at t/acceptSSL-timeout.t line 3.
t/acceptSSL-timeout.t ............. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/auto_verify_hostname.t .......... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/auto_verify_hostname.t line 5.
BEGIN failed--compilation aborted at t/auto_verify_hostname.t line 5.
t/auto_verify_hostname.t .......... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/cert_formats.t .................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/cert_formats.t line 4.
BEGIN failed--compilation aborted at t/cert_formats.t line 4.
t/cert_formats.t .................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/cert_no_file.t .................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/cert_no_file.t line 16.
BEGIN failed--compilation aborted at t/cert_no_file.t line 16.
t/cert_no_file.t .................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/compatibility.t ................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/compatibility.t line 7.
BEGIN failed--compilation aborted at t/compatibility.t line 7.
t/compatibility.t ................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/connectSSL-timeout.t ............ Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/connectSSL-timeout.t line 3.
BEGIN failed--compilation aborted at t/connectSSL-timeout.t line 3.
t/connectSSL-timeout.t ............ Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/core.t .......................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/core.t line 7.
BEGIN failed--compilation aborted at t/core.t line 7.
t/core.t .......................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/dhe.t ........................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/dhe.t line 13.
BEGIN failed--compilation aborted at t/dhe.t line 13.
t/dhe.t ........................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/ecdhe.t ......................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/ecdhe.t line 7.
BEGIN failed--compilation aborted at t/ecdhe.t line 7.
t/ecdhe.t ......................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/external/ocsp.t ................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/external/ocsp.t line 6.
BEGIN failed--compilation aborted at t/external/ocsp.t line 6.
t/external/ocsp.t ................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/external/usable_ca.t ............ Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/external/usable_ca.t line 4.
BEGIN failed--compilation aborted at t/external/usable_ca.t line 4.
t/external/usable_ca.t ............ Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/io-socket-inet6.t ............... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/io-socket-inet6.t line 14.
BEGIN failed--compilation aborted at t/io-socket-inet6.t line 14.
t/io-socket-inet6.t ............... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/io-socket-ip.t .................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/io-socket-ip.t line 10.
BEGIN failed--compilation aborted at t/io-socket-ip.t line 10.
t/io-socket-ip.t .................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/memleak_bad_handshake.t ......... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/memleak_bad_handshake.t line 7.
BEGIN failed--compilation aborted at t/memleak_bad_handshake.t line 7.
t/memleak_bad_handshake.t ......... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/mitm.t .......................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/mitm.t line 5.
BEGIN failed--compilation aborted at t/mitm.t line 5.
t/mitm.t .......................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/nonblock.t ...................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/nonblock.t line 8.
BEGIN failed--compilation aborted at t/nonblock.t line 8.
t/nonblock.t ...................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/npn.t ........................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/npn.t line 7.
BEGIN failed--compilation aborted at t/npn.t line 7.
t/npn.t ........................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/public_suffix_lib_encode_idn.t .. ok     
t/public_suffix_lib_libidn.t ...... ok     
t/public_suffix_lib_uri.t ......... ok     
t/public_suffix_ssl.t ............. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/public_suffix_ssl.t line 3.
BEGIN failed--compilation aborted at t/public_suffix_ssl.t line 3.
t/public_suffix_ssl.t ............. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/readline.t ...................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/readline.t line 16.
BEGIN failed--compilation aborted at t/readline.t line 16.
t/readline.t ...................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/sessions.t ...................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/sessions.t line 7.
BEGIN failed--compilation aborted at t/sessions.t line 7.
t/sessions.t ...................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/signal-readline.t ............... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/signal-readline.t line 5.
BEGIN failed--compilation aborted at t/signal-readline.t line 5.
t/signal-readline.t ............... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/sni.t ........................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/sni.t line 5.
BEGIN failed--compilation aborted at t/sni.t line 5.
t/sni.t ........................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/start-stopssl.t ................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/start-stopssl.t line 6.
BEGIN failed--compilation aborted at t/start-stopssl.t line 6.
t/start-stopssl.t ................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/startssl-failed.t ............... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/startssl-failed.t line 5.
BEGIN failed--compilation aborted at t/startssl-failed.t line 5.
t/startssl-failed.t ............... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/startssl.t ...................... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/startssl.t line 7.
BEGIN failed--compilation aborted at t/startssl.t line 7.
t/startssl.t ...................... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/sysread_write.t ................. Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/sysread_write.t line 11.
BEGIN failed--compilation aborted at t/sysread_write.t line 11.
t/sysread_write.t ................. Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/verify_fingerprint.t ............ Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/verify_fingerprint.t line 4.
BEGIN failed--compilation aborted at t/verify_fingerprint.t line 4.
t/verify_fingerprint.t ............ Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/verify_hostname.t ............... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at t/verify_hostname.t line 5.
BEGIN failed--compilation aborted at t/verify_hostname.t line 5.
t/verify_hostname.t ............... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 
t/verify_hostname_standalone.t .... Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib .) at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
BEGIN failed--compilation aborted at /root/.cpan/build/IO-Socket-SSL-1.992-DXL6gp/blib/lib/IO/Socket/SSL.pm line 17.
Compilation failed in require at t/verify_hostname_standalone.t line 4.
BEGIN failed--compilation aborted at t/verify_hostname_standalone.t line 4.
t/verify_hostname_standalone.t .... Dubious, test returned 2 (wstat 512, 0x200)
No subtests run 

Test Summary Report
-------------------
t/01loadmodule.t                (Wstat: 512 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 2
  Parse errors: Bad plan.  You planned 3 tests but ran 1.
t/acceptSSL-timeout.t           (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/auto_verify_hostname.t        (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/cert_formats.t                (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/cert_no_file.t                (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/compatibility.t               (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/connectSSL-timeout.t          (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/core.t                        (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/dhe.t                         (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/ecdhe.t                       (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/external/ocsp.t               (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/external/usable_ca.t          (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/io-socket-inet6.t             (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/io-socket-ip.t                (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/memleak_bad_handshake.t       (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/mitm.t                        (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/nonblock.t                    (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/npn.t                         (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/public_suffix_ssl.t           (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/readline.t                    (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/sessions.t                    (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/signal-readline.t             (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/sni.t                         (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/start-stopssl.t               (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/startssl-failed.t             (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/startssl.t                    (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/sysread_write.t               (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/verify_fingerprint.t          (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/verify_hostname.t             (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
t/verify_hostname_standalone.t  (Wstat: 512 Tests: 0 Failed: 0)
  Non-zero exit status: 2
  Parse errors: No plan found in TAP output
Files=33, Tests=250,  1 wallclock secs ( 0.10 usr  0.05 sys +  0.47 cusr  0.00 csys =  0.62 CPU)
Result: FAIL
Failed 30/33 test programs. 1/250 subtests failed.
*** Error code 2
make: Fatal error: Command failed for target `test_dynamic'
  SULLR/IO-Socket-SSL-1.992.tar.gz
one dependency not OK (Net::SSLeay); additionally test harness failed
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports SULLR/IO-Socket-SSL-1.992.tar.gz
  AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
  Has already been unwrapped into directory /root/.cpan/build/Net-SMTP-TLS-0.12-tM1TEa
  AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
  Has already been prepared
Running make for A/AW/AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
Warning: Prerequisite 'Net::SSLeay => 0' for 'AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz' failed when processing 'MIKEM/Net-SSLeay-1.63.tar.gz' with 'make_test => NO'. Continuing, but chances to succeed are limited.
Warning: Prerequisite 'IO::Socket::SSL => 0' for 'AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz' failed when processing 'SULLR/IO-Socket-SSL-1.992.tar.gz' with 'make_test => NO one dependency not OK (Net::SSLeay); additionally test harness failed'. Continuing, but chances to succeed are limited.
cp lib/Net/SMTP/TLS.pm blib/lib/Net/SMTP/TLS.pm
Manifying blib/man3/Net::SMTP::TLS.3
  AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
  /usr/bin/make -- OK
Running make test
PERL_DL_NONLAZY=1 /usr/perl5/5.16.1/bin/i386/perl "-MExtUtils::Command::MM" "-e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t
t/00-load.t .. 1/1 
#   Failed test 'use Net::SMTP::TLS;'
#   at t/00-load.t line 6.
#     Tried to use 'Net::SMTP::TLS'.
#     Error:  Can't locate Net/SSLeay.pm in @INC (@INC contains: /root/.cpan/build/Net-SMTP-TLS-0.12-tM1TEa/blib/lib /root/.cpan/build/Net-SMTP-TLS-0.12-tM1TEa/blib/arch /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/site_perl/5.16.1 /usr/perl5/vendor_perl/5.16.1/i86pc-solaris-thread-multi-64int /usr/perl5/vendor_perl/5.16.1 /usr/perl5/5.16.1/lib/i86pc-solaris-thread-multi-64int /usr/perl5/5.16.1/lib) at /root/.cpan/build/Net-SMTP-TLS-0.12-tM1TEa/blib/lib/Net/SMTP/TLS.pm line 89.
# BEGIN failed--compilation aborted at /root/.cpan/build/Net-SMTP-TLS-0.12-tM1TEa/blib/lib/Net/SMTP/TLS.pm line 89.
# Compilation failed in require at (eval 4) line 2.
# BEGIN failed--compilation aborted at (eval 4) line 2.
Use of uninitialized value $Net::SMTP::TLS::VERSION in concatenation (.) or string at t/00-load.t line 9.
# Testing Net::SMTP::TLS , Perl 5.016001, /usr/perl5/5.16.1/bin/i386/perl
# Looks like you failed 1 test of 1.
t/00-load.t .. Dubious, test returned 1 (wstat 256, 0x100)
Failed 1/1 subtests 

Test Summary Report
-------------------
t/00-load.t (Wstat: 256 Tests: 1 Failed: 1)
  Failed test:  1
  Non-zero exit status: 1
Files=1, Tests=1,  0 wallclock secs ( 0.02 usr  0.01 sys +  0.02 cusr  0.00 csys =  0.05 CPU)
Result: FAIL
Failed 1/1 test programs. 1/1 subtests failed.
*** Error code 1
make: Fatal error: Command failed for target `test_dynamic'
  AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
2 dependencies missing (Net::SSLeay,IO::Socket::SSL); additionally test harness failed
  /usr/bin/make test -- NOT OK
//hint// to see the cpan-testers results for installing this module, try:
  reports AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz
Failed during this command:
 MIKEM/Net-SSLeay-1.63.tar.gz                 : make_test NO
 SULLR/IO-Socket-SSL-1.992.tar.gz             : make_test NO one dependency not OK (Net::SSLeay); additionally test harness failed
 AWESTHOLM/Net-SMTP-TLS-0.12.tar.gz           : make_test NO 2 dependencies missing (Net::SSLeay,IO::Socket::SSL); additionally test harness failed
 
Installation of net-ssleay and TLS is independent from a napp-it version.
But it seems that net-ssleay is not installed correctly

try a "pkg update" after pkg install net-ssleay
 
Installation of net-ssleay and TLS is independent from a napp-it version.
But it seems that net-ssleay is not installed correctly

try a "pkg update" after pkg install net-ssleay

I've tried that, but there are not update available.

Code:
OmniOS 5.11     omnios-8c08411  2014.04.28
root@omnios:~# pkg update
No updates available for this image.

That was one of the first things I did after installing OmniOS (before installing napp-it).
 
I tried uninstalling and re-installing. Didn't work. Doing a "which" says it can't be found.

root@omnios:~# pkg uninstall net-ssleay
Packages to remove: 2
Create boot environment: No
Create backup boot environment: No

PHASE ACTIONS
Removal Phase 216/216

PHASE ITEMS
Package State Update Phase 2/2
Package Cache Update Phase 2/2
Image State Update Phase 2/2
root@omnios:~# pkg install net-SSLeay
Creating Plan
pkg install: The following pattern(s) did not match any allowable packages. Try
using a different matching pattern, or refreshing publisher information:

net-SSLeay

root@omnios:~# pkg install net-ssleay
Packages to install: 2
Create boot environment: No
Create backup boot environment: No

DOWNLOAD PKGS FILES XFER (MB)
Completed 2/2 167/167 0.9/0.9

PHASE ACTIONS
Install Phase 199/199

PHASE ITEMS
Package State Update Phase 2/2
Image State Update Phase 2/2
root@omnios:~# pkg update
No updates available for this image.
root@omnios:~# which net-ssleay
no net-ssleay in /usr/gnu/bin /usr/bin /usr/sbin /sbin
root@omnios:~#
 
TLS depends on net-ssleay so the TLS setup fails if net-ssleay ist not setup correctly -
so after the install of net-ssleay and a pkg update, retry to install TLS

Installing Perl modules via CPAN or packages from different repos is sometimes a little bit tricky
If it fails constantly I would go back to a BE prior the first CPAN call and retry.

Sadly, these modules like net-sleay, TLS or Expect are not included in a default Solaris, OmniOS or OI setup. This would simplify such things like status or error mails over gmail or automate interactive commands like passwd or join a domain - with or without napp-it.

ps
it is okay when "which net-ssleay" returns no value, that does not mean anything
 
TLS depends on net-ssleay so the TLS setup fails if net-ssleay ist not setup correctly -
so after the install of net-ssleay and a pkg update, retry to install TLS

Installing Perl modules via CPAN or packages from different repos is sometimes a little bit tricky
If it fails constantly I would go back to a BE prior the first CPAN call and retry.

Sadly, these modules like net-sleay, TLS or Expect are not included in a default Solaris, OmniOS or OI setup. This would simplify such things like status or error mails over gmail or automate interactive commands like passwd or join a domain - with or without napp-it.

ps
it is okay when "which net-ssleay" returns no value, that does not mean anything

It's still not working for me.

I did another install and this time I decided to forgo the TLS modifications and try a mail forwarding service. I tried both SendGrid and mailfish.de. Neither works for me. When I try to send an email I get the following error:

oops...
send error to [email protected]

Nothing else posts to the page. Is there a log somewhere where more detailed information is posted?
 
Maybe it's trying to connect over TLS? Is there a way for me to specify a port to connect over SMTP on? Also, is there a way for me to specify that it should do so unencrypted? These are the ports my mail forwarding service supports:

Many hosting providers and ISPs block port 25 as a default practice. When trying to connect to smtp.sendgrid.net remember that ports 25, 2525, 587, and 465 are all available for use.

You can connect via unencrypted or TLS on ports 25, 2525, and 587. You can connect via SSL on port 465.
 
I downloaded the LTS version of OmniOS (r151006) and attempted to get this working, but I'm running into the same issues as the stable version.

Maybe this isn't an OmniOS nor napp-it issue... perhaps something was updated in SSLeay?
 
Hi! I was running in the same TLS error when i reinstalled my Nappit VM in the last days. After some tests i downloaded OmniOS_Text_r151010.iso and got it working by installing the net-ssleay before doing a pkg image-update (or pkg update), that did the trick for me. After that i did a pkg update and got some ssl updates, maybe that is breaking the initial net-ssleay or cpan installation, when doing the installation after the pkg update.
 
Last edited:
I have done the same test and I can confirm:

You must install net-ssleay prior a pkg update or pkg image-update:
- install OmniOS 151010
- install net-ssley
- install TLS
- do a pkg update (updates OpenSSL to 1.0.1h from 5.6.2014)

I seems that the new security fix for OpenSSL breaks net-ssleay in the case it is installed after the security fix from 5.6.2014

I have updated my setup instructions on
http://napp-it.org/downloads/omnios_en.html
 
It's still not working for me :(.

Installed OmniOS 151010.
Installed net-ssleay
Installed TLS
Installed napp-it
Rebooted
Installed netatalk
Rebooted
Accessed the web interface and tried to send through gmail, got the same error
Did a pkg update which updated OpenSSL
Tried again and still got the same error

It's also worth noting that the ISO for 151010 is now 151010j (which I believe already includes the OpenSSL patch).
 
about: sending encrypted statusmails via TLS (Googlemail)

You can use OmniOS + net-ssleay + Perl module Tls.pm to send encrypted mails
over Googlemail and others from napp-it (or from a a console script)

Up to last week this was done by a
pkg set-publisher -g http://pkg.omniti.com/omniti-perl/ perl.omniti.com
pkg install net-ssleay

followed by a install Net::SMTP::TLS from CPAN
(more http://napp-it.org/downloads/omnios_en.html)

After updating SSL (or using OmniOS 151010j) the install of Tls failed with a "Can't locate Net/SSLeay.pm"


I then compared both settings and found:

OmniOS net-ssleay prior SSL Update
find / -name SSLeay.pm

/usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int/Net/SSLeay.pm
/opt/OMNIperl/lib/site_perl/5.14.2/i86pc-solaris-thread-multi-64/Net/SSLeay.pm
/opt/OMNIperl/lib/site_perl/5.14.2/i86pc-solaris-thread-multi-64int/Net/SSLeay.pm


OmniOS net-ssleay after SSL Update (or OmniOS 151010j)
find / -name SSLeay.pm
/opt/OMNIperl/lib/site_perl/5.14.2/i86pc-solaris-thread-multi-64/Net/SSLeay.pm
/opt/OMNIperl/lib/site_perl/5.14.2/i86pc-solaris-thread-multi-64int/Net/SSLeay.pm


When I just copy
/opt/OMNIperl/lib/site_perl/5.14.2/i86pc-solaris-thread-multi-64int/Net/ to /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int/


i got a
Deep recursion on subroutine "Net::SSLeay::AUTOLOAD" at /usr/perl5/site_perl/5.16.1/i86pc-solaris-thread-multi-64int/Net/SSLeay.pm line 348.


Out of memory!


Someonae an idea?
 
Here's what I've discovered:

First off, the net-ssleay pkg [/opt/OMNIperl] from the omniti repo is a red herring.
Remove it and the "perl.omniti.com" publisher, it is just confusing and not related since
we are building out the installed /usr/bin perl from CPAN.

Second, the issue is with the "Net::SSLeay" perl package, a dependency of Net::SMTP::TLS

I believe that something is broken between CPAN's test vectors and OpenSSL versioning
up from g to h.

Here's what I see:
when
openssl version
returns 1.0.1g [before the very recent OmniOS "pkg update" fix], the SSLeay perl test
vector #33 for SHA-1 of a hand-constructed x509 NAME succeeds. After the patch, when
openssl version
returns 1.0.1h [5 Jun 2014]
the behavior of vector #33 for SSLeay changed. You can see that in the hash miscompare quoted above.
# Failed test 'X509_NAME_digest'
# at t/local/33_x509_create_cert.t line 107.
# got: 'ce83889f1beab8e70aa142e07e94b0ebbd9d59e0'
# expected: '044d7ea7fddced7b9b63799600b9989a63b36819'

My working process was:
remove the omniti/net-ssleay package and dependencies; there is no /opt/OMNIperl
do "pkg update" to get most recent SSL
perl -MCPAN -e shell
install CPAN
exit

Now then
perl -MCPAN -e shell
install Net::SSLeay

if you saw the error above [blown test vector] you can:
notest install Net::SSLeay

once that succeeds [it should build and install, skipping the test]

install Net::SMTP::TLS

should work. if things go too far sideways, deleting the .cpan directory for root will allow
a clean start of re-installing and re-building.
you can see the test vector fail [or succeed] yourself if you cd
.cpan/build/Net-SSLeay-1.63-xxxxxx # a temp-dir style name
make test

That failing test vector is cause for concern; one, some or all of the test
vector, the test, and the CPAN code needs revisiting after the OpenSSL patchload.

Cheers
 
Some more info; the failure seems worrying, but i think in fact it is not.
Here's why...

In the .cpan/build/Net-SSLeay-1.63-xxxxxx directory, file patched
as follows:

--- t/local/33_x509_create_cert.t-orig Mon Jun 9 23:04:37 2014
+++ t/local/33_x509_create_cert.t Mon Jun 9 23:00:32 2014
@@ -104,6 +104,22 @@
like(my $key_pem4 = Net::SSLeay::pEM_get_string_PrivateKey($pk,"password",$alg2), qr/-----BEGIN (ENCRYPTED|RSA) PRIVATE KEY-----/, "PEM_get_string_PrivateKey+passwd+enc_alg");

is(Net::SSLeay::X509_NAME_print_ex($name), "O=Company Name,C=UK,CN=Common name text X509", "X509_NAME_print_ex");
+
+
+print {*STDERR} "\nprint_ex:\n";
+my $namex = Net::SSLeay::X509_NAME_print_ex($name);
+print {*STDERR} $namex;
+print {*STDERR} "\nNAME_digest is:\n";
+print {*STDERR} unpack("H*",Net::SSLeay::X509_NAME_digest($name, $sha1_digest));
+print {*STDERR} "\nprint_ex hash is:\n";
+my $ctx = Net::SSLeay::EVP_MD_CTX_create();
+Net::SSLeay::EVP_DigestInit($ctx, $sha1_digest);
+Net::SSLeay::EVP_DigestUpdate($ctx, $namex);
+my $digest = Net::SSLeay::EVP_DigestFinal($ctx);
+print {*STDERR} unpack("H*",$digest);
+print {*STDERR} "\n";
+
+
is(unpack("H*",Net::SSLeay::X509_NAME_digest($name, $sha1_digest)), "044d7ea7fddced7b9b63799600b9989a63b36819", "X509_NAME_digest");

ok(my $ext_idx = Net::SSLeay::X509_get_ext_by_NID($x509, &Net::SSLeay::NID_ext_key_usage), "X509_get_ext_by_NID");




Then observe:

server> pkg update [email protected]
[...]
server> openssl version
OpenSSL 1.0.1g 7 Apr 2014
server> make test
[...]
print_ex:
O=Company Name,C=UK,CN=Common name text X509
NAME_digest is:
044d7ea7fddced7b9b63799600b9989a63b36819
print_ex hash is:
9478845be0e8f474b1d19a20d1664249c8677c7c
[...]


server> pkg update openssl
[...]
server> openssl version
OpenSSL 1.0.1h 5 Jun 2014
server> make test
[...]
print_ex
O=Company Name,C=UK,CN=Common name text X509
NAME_digest is:
ce83889f1beab8e70aa142e07e94b0ebbd9d59e0
print_ex hash is:
9478845be0e8f474b1d19a20d1664249c8677c7c

# Failed test 'X509_NAME_digest'
# at t/local/33_x509_create_cert.t line 123.
# got: 'ce83889f1beab8e70aa142e07e94b0ebbd9d59e0'
# expected: '044d7ea7fddced7b9b63799600b9989a63b36819'
[...]


So, the hash itself is fine. The issue seems to be internal to openssl;
this particular X509_NAME_digest routine calls the digest function on the
raw internal structure. ...which can be different depending upon whether
OPENSSL_NO_BUFFER is defined, and possibly other compiler-related memory
layout issues. In general [at least if i read the code correctly] this
looks like a bad idea for a test - don't hash a structure and expect
the same answer later. More likely, part of the security updates may be
carefully counted buffers [BUF_MEM] instead of raw pointers.

You can of course also do the openssl downgrade per above, but that's
probably a worse idea since 1.0.1h is a vulnerability update.

If anyone is in contact with the SSLeay CPAN maintainers, changing the test vector
as above to be of some kind of canonicalized name sha1 instead of raw structure is advised.

Cheers
 
update:
https://rt.cpan.org/Public/Bug/Display.html?id=96256

Seems we need to wait for a update of net-ssley
Up to then using the first OmniOS 151010 without the newest OpenSSL should work


When the the OpenSSL is installed, try the follwing at console (thanks Rick)
on questions, answer with defaults

perl -MCPAN -e shell

(at cpan shell, enter)
notest install Net::SSLeay
notest install IO::Socket::SSL
notest install Net::SMTP::TLS
exit;
 
Last edited:
Hi Gea,

right now i have a setup with proxmox hypervisors and omnios+napp-it storage boxes.
Due to instability of Proxmox i decided to quit proxmox and go for debian wheezy + kvm + webvirtmgr. I have webvirtmgr running on 1 node. Omnios+ Napp-it is used to serve an nfs share to the hypervisor. At first this failed because the nfs rights were not set properly.
I could not create a new hypervisor on the nfs share.
I changed the share rights with root@... and set zfs set aclmode=passthrough
zfs set aclinherit=passthrough-x on the share.
Now i can create a vm but i cannot start it. I have to first chmod the rights to start the vm.
The rights on the vm file are --rw-------- so only root user has rights.
I want to change that into --rw--rw--rw.
Can you please give me directions how to set that rights?

Regards,

Dirk Adamsky
 
Hi levak,

that does work indeed for a already created vm.
But when i create a new vm, the rights on the new disk file are set to -rw-----.

Regards,

dirk
 
Hi Gea,

right now i have a setup with proxmox hypervisors and omnios+napp-it storage boxes.
Due to instability of Proxmox i decided to quit proxmox and go for debian wheezy + kvm + webvirtmgr. I have webvirtmgr running on 1 node. Omnios+ Napp-it is used to serve an nfs share to the hypervisor. At first this failed because the nfs rights were not set properly.
I could not create a new hypervisor on the nfs share.
I changed the share rights with root@... and set zfs set aclmode=passthrough
zfs set aclinherit=passthrough-x on the share.
Now i can create a vm but i cannot start it. I have to first chmod the rights to start the vm.
The rights on the vm file are --rw-------- so only root user has rights.
I want to change that into --rw--rw--rw.
Can you please give me directions how to set that rights?

Regards,

Dirk Adamsky

Set permissions to everyone@=modify recursively

- under menu ZFS filesystems, click on the NFS shared filesystems under Folder-ACL
- you will see the ACL settings. Click on reset ACLs below the listing
- select modufy with folder, files and recursive enabled

You can do the same with /usr/bin/chmod

Other option is to enable root access on NFS as a share parameter like
[email protected]/24,[email protected]/24 b1/repli
 
Hi levak and gea,

i did reset the acl.
The rights are indeed working after that.
Unfortunately new vm files still get -rw-------.rights
Any ideas?
 
-rw------- is the way thay should be... It's for security purpuse...

Do you create a VM under root user?
Which users then starts the VM? Root as well?
Show me your "zfs get sharenfs poolname" for NFS share

MAtej
 
You may try:
- reset ACL everyonme@=modify
- set aclmode of that filesystem to restricted

That hinders a cliend to modify permissions via chmod
 
Does this Bonnie++ benchmark seem low? I have 21 mirrors of 7200RPM drives. 42 drives split across two expanders which each have 2 SFF cables going to the LSI HBA.

d2qlyhe.png
 
Back
Top