Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

How can I downgrade OpenSSL to 1.0.0 in Ubuntu?

I have installed Ubuntu 12.04. Sadly, there is a problem with OpenSSL 1.0.1 and I would need to downgrade to version 1.0.0.

How can I do it the easiest way?

When I run:

sudo apt-cache madison openssl

Only versions 1.0.1 get listed.

All tips are appreciated!

share|improve this question
    
Did you ever try this? Was it sucsessful? Was it because of this bug: bugs.launchpad.net/ubuntu/+source/openssl/+bug/… –  JDS Feb 20 '13 at 3:20
    
Yes that was exactly the bug that caused me to downgrade. Due to other reasons we ended up reinstalling the whole OS from scratch (downgraded to earlier Ubuntu). –  Jaakko Feb 20 '13 at 12:41
    
But, did the downgrade work? It sounds like you never put it into production, though... I was also wondering if there were any ill effects or security problems with doing this –  JDS Feb 20 '13 at 13:12
    
Yes the downgrade worked. I don't know in detail about the security implications, but if you ask me I'd much rather have a 99% secure service online than 100% secure service offline. –  Jaakko Feb 20 '13 at 16:32
add comment

2 Answers

You probably want to download the .deb package. It is the 1.0.0g version of OpenSSL. next you could just install it from the .deb. I have never done a downgrade from OpenSSL myself so you better do not try this on production systems.

share|improve this answer
add comment

apt-get has a feature called Pinning, which addresses your problem. Details can be found in this how-to

share|improve this answer
    
This sounds great. I'm reading the docs, but I would really like to hear more help! –  Jaakko May 27 '12 at 17:48
    
What sort of help do you need? Have you already tried creating/editing /etc/apt/preferences and making an entry for openssl? –  Dominic Cronin May 28 '12 at 18:00
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.