Environment
Novell Access Manager 3.1 SSLVPN Server
Novell Access Manager 3.1 Support Pack 3 applied
SSLVPN server running on SLES 11 x86-64
ENterprise mode enabled using ESP based SSLVPN server
SSLVPN client running on OpenSuSE 11.3 x86-64 platform
Novell Access Manager 3.1 Support Pack 3 applied
SSLVPN server running on SLES 11 x86-64
ENterprise mode enabled using ESP based SSLVPN server
SSLVPN client running on OpenSuSE 11.3 x86-64 platform
Situation
SSLVPN server setup and working fine from all Windows based clients. Linux based clients running OpenSuSE 11.3 x86-64 would fail to connect to the server successfully. The client logs available on the OpenSuSE desktop showed the following log entries:
Tue Feb 22 10:50:38 2011 LOG6: Connecting ......
Tue Feb 22 10:50:39 2011 LOG6: Successful command GETVERSION. Service version is 3.1.2.4
Tue Feb 22 10:50:39 2011 LOG6: Command looks like 206.55.26.0,255.255.255.0
192.168.10.0,255.255.255.0
192.168.3.0,255.255.255.0
164.99.0.0,255.255.0.0
10.20.0.0,255.255.0.0
137.65.0.0,255.255.0.0
147.2.0.0,255.255.0.0
10.0.9.0,255.255.255.255
10.0.0.0,255.0.0.0
10.204.0.0,255.255.255.0
149.44.0.0,255.255.0.0
130.57.1.88,255.255.255.255
151.155.128.0,255.255.128.0
10.11.0.0,255.255.0.0
10.202.0.0,255.255.254.0
10.10.0.0,255.255.0.0
Tue Feb 22 10:50:39 2011 LOG6: Successfully updated the policy
Tue Feb 22 10:50:39 2011 LOG6: proper signature. Binary is verified
/root/bin/openvpn: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory
Tue Feb 22 10:50:39 2011 LOG6: Bad command
The list of SSL packages running on the client host were:
neildub@howaya:~/Desktop> rpm -qa|grep ssl
openssl-1.0.0-6.5.1.x86_64
python-openssl-0.9-5.1.x86_64
novl-sslvpn-service-3.1.2-251.i586
libopenssl1_0_0-32bit-1.0.0-6.5.1.x86_64
libopenssl1_0_0-1.0.0-6.5.1.x86_64
Tue Feb 22 10:50:38 2011 LOG6: Connecting ......
Tue Feb 22 10:50:39 2011 LOG6: Successful command GETVERSION. Service version is 3.1.2.4
Tue Feb 22 10:50:39 2011 LOG6: Command looks like 206.55.26.0,255.255.255.0
192.168.10.0,255.255.255.0
192.168.3.0,255.255.255.0
164.99.0.0,255.255.0.0
10.20.0.0,255.255.0.0
137.65.0.0,255.255.0.0
147.2.0.0,255.255.0.0
10.0.9.0,255.255.255.255
10.0.0.0,255.0.0.0
10.204.0.0,255.255.255.0
149.44.0.0,255.255.0.0
130.57.1.88,255.255.255.255
151.155.128.0,255.255.128.0
10.11.0.0,255.255.0.0
10.202.0.0,255.255.254.0
10.10.0.0,255.255.0.0
Tue Feb 22 10:50:39 2011 LOG6: Successfully updated the policy
Tue Feb 22 10:50:39 2011 LOG6: proper signature. Binary is verified
/root/bin/openvpn: error while loading shared libraries: libssl.so.0.9.8: cannot open shared object file: No such file or directory
Tue Feb 22 10:50:39 2011 LOG6: Bad command
The list of SSL packages running on the client host were:
neildub@howaya:~/Desktop> rpm -qa|grep ssl
openssl-1.0.0-6.5.1.x86_64
python-openssl-0.9-5.1.x86_64
novl-sslvpn-service-3.1.2-251.i586
libopenssl1_0_0-32bit-1.0.0-6.5.1.x86_64
libopenssl1_0_0-1.0.0-6.5.1.x86_64
Resolution
To make this work, on openSUSE 11.3 x86_64, install the following packages:
libopenssl0_9_8-0.9.8m-3.3.1.x86_64
libopenssl0_9_8-32bit-0.9.8m-3.3.1.x86_64
The following libraries are not backwards compatible.
libopenssl0_9_8-0.9.8m-3.3.1.x86_64
libopenssl0_9_8-32bit-0.9.8m-3.3.1.x86_64
The following libraries are not backwards compatible.