Bind9 (named) does not start after upgrade from 9.16.1 to 9.16.15
I am using bind9 on Ubuntu 21.10. Under an older Version of bind9, everything is working fine:
$ named -v
BIND 9.16.1-Ubuntu (Stable Release) <id:[censored]>However, when I am upgrading bind9 to the newer Version 9.16.15-Ubuntu, I start having problems:
$ sudo /etc/init.d/bind9 status
× named.service - BIND Domain Name Server Loaded: loaded (/lib/systemd/system/named.service; enabled; vendor preset: enabled) Active: failed (Result: exit-code) since Wed 2021-10-20 11:03:30 CEST; 5min ago Docs: man:named(8) Process: 576399 ExecStart=/usr/sbin/named $OPTIONS (code=exited, status=127) CPU: 15ms
Okt 20 11:03:30 [censored] systemd[1]: named.service: Scheduled restart job, restart counter is at 5.
Okt 20 11:03:30 [censored] systemd[1]: Stopped BIND Domain Name Server.
Okt 20 11:03:30 [censored] systemd[1]: named.service: Start request repeated too quickly.
Okt 20 11:03:30 [censored] systemd[1]: named.service: Failed with result 'exit-code'.
Okt 20 11:03:30 [censored] systemd[1]: Failed to start BIND Domain Name Server.Running plain named shows the following error:
$ named
named: symbol lookup error: /usr/lib/x86_64-linux-gnu/libdns-9.16.15-Ubuntu.so: undefined symbol: EVP_PKEY_new_raw_public_keyThis error has no Google results, but the name of the symbol seems to be related to OpenSSL, so I'm including my version:
$ openssl version
OpenSSL 1.1.1l 24 Aug 2021 (Library: OpenSSL 1.1.1a 20 Nov 2018)What can I do to fix the problem?
41 Answer
It turns out that the problem was OpenSSL being linked to inconsistent libraries. I had the right libraries installed, but had not removed the wrong libraries yet.
Removing those libraries and running ldconfig afterwards solved the problem for me:
sudo rm /lib/x86_64-linux-gnu/libssl.so.1.1
sudo rm /lib/x86_64-linux-gnu/libcrypto.so.1.1
sudo ldconfigThanks to @waltinator and @Tilman for their comments in this thread.