Summary
The SecureCloud Agent fails to verify the SSL connection to the KMS when OpenSSL is ugpraded to a version from February 11, 2013 or above.
Details
The issue occurs because the libcrypto.so file during the SecureCloud agent installation does not match the newer version of OpenSSL.
As a workaround, replace the old library file with a symbolic link of the new version.
Do the following:
- Under /var/lib/securecloud, back up libcrypto.so.10. Run the following mv command:
# mv libcrypto.so.10 libcrypto.so.10.bak
- Create a symbolic link "libcrypto.so.10" inside the system library of the SecureCloud Agent folder. The default path is /usr/lib64/libcrypto.so.10 in a 64-bit machine.
Run the following command:# ln -s /usr/lib64/libcrypto.so.10 /var/lib/securecloud/libcrypto.so.10
- Update the SecureCloud Agent. Do any of the following:
- Restart the SecureCloud Agent. Run the following command:
# service scagentd restart
- Reconfigure the Agent by running any of the following commands:
#sh /var/lib/securecloud/scconfig.shor#sh /var/lib/securecloud/scprov.sh conf
- Restart the SecureCloud Agent. Run the following command:
