1

How can I downgrade OpenSSL to 1.0.0 in Ubuntu?

I have installed Ubuntu 12.04. Sadly, there is a problem with OpenSSL 1.0.1 and I would need to downgrade to version 1.0.0.

How can I do it the easiest way?

When I run:

sudo apt-cache madison openssl

Only versions 1.0.1 get listed.

All tips are appreciated!

4
  • Did you ever try this? Was it sucsessful? Was it because of this bug: bugs.launchpad.net/ubuntu/+source/openssl/+bug/…
    – JDS
    Feb 20, 2013 at 3:20
  • Yes that was exactly the bug that caused me to downgrade. Due to other reasons we ended up reinstalling the whole OS from scratch (downgraded to earlier Ubuntu).
    – Jaakko
    Feb 20, 2013 at 12:41
  • But, did the downgrade work? It sounds like you never put it into production, though... I was also wondering if there were any ill effects or security problems with doing this
    – JDS
    Feb 20, 2013 at 13:12
  • Yes the downgrade worked. I don't know in detail about the security implications, but if you ask me I'd much rather have a 99% secure service online than 100% secure service offline.
    – Jaakko
    Feb 20, 2013 at 16:32

2 Answers 2

2

apt-get has a feature called Pinning, which addresses your problem. Details can be found in this how-to

2
  • This sounds great. I'm reading the docs, but I would really like to hear more help!
    – Jaakko
    May 27, 2012 at 17:48
  • What sort of help do you need? Have you already tried creating/editing /etc/apt/preferences and making an entry for openssl? May 28, 2012 at 18:00
1

You probably want to download the .deb package. It is the 1.0.0g version of OpenSSL. next you could just install it from the .deb. I have never done a downgrade from OpenSSL myself so you better do not try this on production systems.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .