V15 installer could not determine supported encryption library

Hello, I am installing IBM Informix 15.0.0.0 Developer Edition on my Linux Debian 12. I have selected OpenSSL as encryption library, and I have: informix@toro:/opt3/dbs/ifx/IDS-15.0.0.0$ openssl version OpenSSL 3.0.15 3 Sep 2024 (Library: OpenSSL 3.0.15 3 Sep 2024) And I got this error at the end of the installation: .... Status: FATAL ERROR Additional Notes: FATAL ERROR - Couldn't determine supported encryption library ERROR - Couldn't determine supported encryption library Status: FATAL ERROR Additional Notes: FATAL ERROR - INTERNAL ERROR: install: isisofile is null I assume it's related to OpenSSL? I do not plan to use TLS/SSL connections on my dev machine so is this a blocker? Seb ------------------------------ Sebastien FLAESCH ------------------------------

Something strange: First time I ran the V15 installer, I could choose between 2 encryption libraries: GSKit or OpenSSL. I have selected OpenSSL during this first installation. Now I try to re-install from scratch, but I don't see the option to choose between GSKit or OpenSSL I did a "private" installation. Did I miss something? I guess the installer writes my choices somewhere? Is there any way to cleanup my previous choices? I see quite some temp tiles in /tmp: drwxr-xr-x 3 informix informix 4096 Dec 10 12:15 install.dir.728976 -rw-rw-r-- 1 informix informix 0 Dec 10 12:15 2d5757f7193b04849ef.notes drwxrwxr-x 2 informix informix 4096 Dec 10 12:15 ismp001 drwxrwxr-x 3 informix informix 4096 Dec 10 12:16 766705.tmp -rw-rw-r-- 1 informix informix 3517 Dec 10 12:16 2d5757f7193b04849ef.details drwxr-xr-x 3 informix informix 4096 Dec 10 12:16 install.dir.729809 -rw-rw-r-- 1 informix informix 0 Dec 10 12:16 8a5c9440193b04906e0.notes drwxrwxr-x 2 informix informix 4096 Dec 10 12:16 ismp002 drwxrwxr-x 3 informix informix 4096 Dec 10 12:17 089653.tmp -rw-rw-r-- 1 informix informix 3517 Dec 10 12:17 8a5c9440193b04906e0.details -rw-rw---- 1 informix informix 21736 Dec 10 12:22 iad_act.log -rw-rw-r-- 1 informix informix 41289 Dec 10 12:22 bundle_install.stdout -rw-rw-r-- 1 informix informix 66192 Dec 10 12:22 bundle_install.stderr drwxr-xr-x 2 informix informix 4096 Dec 10 12:22 hsperfdata_informix Seb ------------------------------ Sebastien FLAESCH ------------------------------

I tried the same, on (Windows/WSL based) Debian 12, with same OpenSSL version, yet as a standard root-install: it didn't ask which encryption lib to use - because of the root-install?? it successfully installed IBM GSKit it failed with same error in $INFORMIXDIR/lib/, the only libisi* item I got is libisi_gsk.so.3.0 so no libisi_o*.3.0 which would be the OpenSSL variants (for OpenSSL versions) and no libisi.so.3 (sym link I'd assume) which probably is what "isisofile is null" is referring to libisi (Informix Security Interface) is a wrapper layer around either GSKit or OpenSSL, for providing a unified internal interface to all those security and cryptographic calls. It (libisi.so.3) would be a link to (or a copy of) one of the sub-system specific libisi_* objects, thus determining which system's gonna be used - basically the decision you made there for OpenSSL. The error we're both seeing, you for OpenSSL and I for the (default?) GSKit, simply indicates the installer wasn't able to determine which shared object to create this link for... libisi.so.3 now missing, as you correctly suspected, will disallow any security and encryption related functionality - and not be a problem as long as you'd not go there. Only, it's not only TLS/SSL, or maybe column level encryption or Ear; what this also would disable is any edition other than the (default) Developer Edition. The good news: you can very easily cure this problem by manually creating that sym link Nonetheless, we'd like to understand this failure -> investigating... And no, I'd not know that/where it remembers that GSKit/OpenSSL decision for a later ids_install. BR, Andreas ------------------------------ Andreas Legner Dev Engineer HCL Software ------------------------------

Hello Andreas, Thanks for your detailed answer! Here is what I see in the $INFORMIXDIR/lib dir (no symblink): informix@toro:/opt3/dbs/ifx/IDS-15.0.0.0/lib$ ls -l libisi* -rwxr-xr-x 1 informix informix 142104 Dec 10 12:22 libisi_gsk.so.3.0 From a developer perspective, I do not need encryption features. I could start the server and run our QA tests without problems after doing some adjustments for the BIGINT negative rowids, and the new syscolumns.collength size for TEXT/BYTE columns. I did also run 50 times all our tests with the same fglrun process under valgrind --tool=massif and saw no memory leak (flat graph below): BR, Seb ------------------------------ Sebastien FLAESCH ------------------------------

Actually, a "private install" also doesn't ask this GSKit/OpenSSL choice - are you possibly confusing this with CSDK installation? Also: is this possibly part of the problem: $ ldd /usr/bin/gsk8capicmd_64 linux-vdso.so.1 (0x00007ffccebde000) libgsk8km_64.so => not found <<<<<<<<< libgsk8cms_64.so => not found <<<<<<<<< libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f94da141000) libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f94da13c000) libstdc++.so.6 => /lib/x86_64-linux-gnu/libstdc++.so.6 (0x00007f94d9f22000) libm.so.6 => /lib/x86_64-linux-gnu/libm.so.6 (0x00007f94d9e41000) libgcc_s.so.1 => /lib/x86_64-linux-gnu/libgcc_s.so.1 (0x00007f94d9e21000) libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f94d9c40000) /lib64/ld-linux-x86-64.so.2 (0x00007f94da14e000)Not sure right now what's causing this (I've uninstalled my GSKit and had a new run of ids_install re-install it). ------------------------------ Andreas Legner Dev Engineer HCL Software ------------------------------

Looks like LD_LIBRARY_PATH=/usr/lib64 solves the problem for the GSKit utilities (gsk8capicmd, ...) - and might be able to solve this installer problem if only it made it from the command line all the way through ids_install -> a java process to a utility testing the libisi_gsk.so library. How can this be set system wide? ------------------------------ Andreas Legner Dev Engineer HCL Software ------------------------------

So this finally seems to be doing the trick: as root: echo /usr/lib64 > /etc/ld.so.conf.d/gskit.conf ldconfig -v ------------------------------ Andreas Legner Dev Engineer HCL Software ------------------------------

Hello Andreas, I have installed both Informix 15 server and CSDK 15 (in separate dirs) So yes may I have seen the GSKit/OpenSSL choice in the CSDK installation. For sure I have never selected the "Multiuser Installation", and used "informix" user to run ids_install. About: $ ldd /usr/bin/gsk8capicmd_64 linux-vdso.so.1 (0x00007ffccebde000) libgsk8km_64.so => not found <<<<<<<<< libgsk8cms_64.so => not found <<<<<<<<<I am not an expert of GSKit, but this looks more like a GSKit installation / config problem into the Linux system. On my Linux Debian 12, I see the same issue with the ldd check: root@toro:~# ldd /usr/bin/gsk8capicmd_64 linux-vdso.so.1 (0x00007ffd27ffa000) libgsk8km_64.so => not found libgsk8cms_64.so => not found ... root@toro:~# dpkg-query --search libgsk8km_64.so gskssl64: /usr/local/ibm/gsk8_64/lib64/libgsk8km_64.so root@toro:~# dpkg-query --search libgsk8cms_64.so gskssl64: /usr/local/ibm/gsk8_64/lib64/libgsk8cms_64.so Seb ------------------------------ Sebastien FLAESCH ------------------------------

Hi the workaround is to install the Informix Server - install GSKIT out of $INFORMIXDIR/gskit and then install the Informix Server again. Then normally the GSKIT setup for the server is fine. ------------------------------ Hedwig Fuchs ------------------------------

Hello Andreas - I have the same problem with gskit install with 14.10.FC11W1 on AIX 7.2 - see my previous post from yesterday. Tried with older engine stopped. Script installgskit run witnout reporting any error but gskit is not installed (even when I renames current gskit_64 dir in /usr/opt/ibm. Could help running installp on *.rte files which are in gskit directory after unpacking the archive with them. ------------------------------ Milan ------------------------------