Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I previously replaced openssl on my centos box with openssl10, using something like these instructions:

rpm -Uvh
yum install yum-plugin-replace
# Edit /etc/yum.repos.d/ius-archive.repo and 
# enable the ius-archive repo by changing enabled=0 to enabled=1.
yum replace openssl --replace-with openssl10

Then when I do a general yum update I get errors because of openssl, so instead I do:

yum update -x openssl -x postfix

This seems to work fine, but in actual fact, I can no longer reconnect over ssh to the box:

me@local $ ssh -S none root@the_server
ssh_exchange_identification: Connection closed by remote host

Any ideas on how to recover from this situation?

Edit: When I run sshd on the server (I still have an open connection), I get the following error:

ssh: relocation error: ssh: symbol SSLeay_version, version OPENSSL_1.0.1 
    not defined in file with link time reference
share|improve this question
Don't try to replace the system OpenSSL. Just don't. You will break practically everything on the system. And I don't recommend the IUS repos either, since they seem to recommend various ways of breaking your system... – Michael Hampton Mar 9 '14 at 17:38
I agree with that sentiment now! Won't help with this question, but do you know of a better way of getting the latest version of openssl? My motivation was installation of SPDY on nginx. – EoghanM Mar 9 '14 at 17:38
I think that you are having an issue related to OpenSSL being upgraded in CentOS 6.5. If this is the case, the solution is here. – Michael Hampton Mar 9 '14 at 17:39
1 explains how to resolve it and why you shouldn't have to use it anymore. – faker Mar 9 '14 at 17:48
up vote 3 down vote accepted

There has been a bug when using IUS repositories and using it to replace openssl with openssl10 and then trying to upgrade to CentOS 6.5.

Basically what you have to do is go back to the stock openssl - which now is anyway on version 1.0.1:

yum replace openssl10 --replace-with openssl

Use of openssl10 is unnecessary now and unsupported.
That is also why it is only available in the archive repo.

For more information see: and

share|improve this answer
This is likely the right answer, however I'm getting Error: Trying to remove "yum", which is protected when I try to run yum replace. – EoghanM Mar 15 '14 at 8:29
Dependencies are openssl10 -> python-libs -> pygpgme -> yum – EoghanM Mar 15 '14 at 8:43

Answer from @faker should be tried first, but if that doesn't work I found the following instructions at

If you want to be on the safe side, also download rpms of yum and all it's dependencies

(Replace with the exact one appropriate for your installation)


rpm -i openssl-*
    file /usr/lib64/ from install of openssl-1.0.1e-16.el6_5.4.x86_64 conflicts with file from package openssl10-libs-1.0.1e-1.ius.el6.x86_64
    .... lots more lines

Now take a backup of all those conflicting files in such a way as you can reinstate them to their correct folder if something goes wrong.

Finally, you can take a leap and do:

rpm  -iv --replacepkgs --replacefiles openssl-*

If all goes well yum update should work.

Edit: also erase the packages so that they don't conflict on future updates:

rpm -qa |grep ius
... lists packages
rpm -e openssl10-libs-1.0.1e-1.ius.el6.x86_64
rpm -e openssl10-devel-1.0.1e-1.ius.el6.x86_64
share|improve this answer
Thanks a lot, this post really made my day. – freedev Oct 27 '14 at 11:23

I know it is already answered, but I found an easier solution to the above issue

yum update openssl openssl-devel
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.