From: "M. Edward (Ed) Borasky" <znmeb@...>
Date: 2007-07-16T02:14:10+09:00
Subject: Re: CentOS 5 - ruby-1.8.6 - openssl

Patrick Derwael wrote:
> Hi list,
> 
> Frist of all, I'm very sorry if I bother you all with *another* post on
> using openssl, but I'm really tearibng my hair off since a number of
> weeks...
> 
> As the subject says, I'm runnint CentOS5, I've installed ruby 1.8.6 with
> no particular issue.
> Rubygems is also installed, with no particular message.
> 
> When i try to run the an appication developed with ruby, I get the
> following:
> 
> [root@wac-srv-pent-03 metasploit]# ./msfweb
> ./lib/rex/socket/ssl_tcp_server.rb:4:in `require': no such file to load
> -- openssl (LoadError)
>         from ./lib/rex/socket/ssl_tcp_server.rb:4
>         from ./lib/rex/socket/comm/local.rb:5:in `require'
>         from ./lib/rex/socket/comm/local.rb:5
>         from ./lib/rex/socket.rb:22:in `require'
>         from ./lib/rex/socket.rb:22
>         from ./lib/rex.rb:71:in `require'
>         from ./lib/rex.rb:71
>         from ./lib/msf/core.rb:16:in `require'
>         from ./lib/msf/core.rb:16
>         from ./lib/msf/base.rb:19:in `require'
>         from ./lib/msf/base.rb:19
>         from ./msfweb:11:in `require'
>         from ./msfweb:11
> [root@wac-srv-pent-03 metasploit]#
> 
> 
> On the CentOS box, the following libs are installed:
> openssl   0.9.8b-8.3
> openssl-devel  0.9.8b-8.3
> openssl-perl  0.9.8b-8.3
> openssl097a  0.9.7a-9
> 
> I have seen on several posts that I should install libopenssl-ruby1.8,
> but I can't locate a version that would run on CentOS.
> 
> Help please !!
> 
> BTW: I'm not a developer, just a basic user of an application developed
> with ruby... please don't shoot at sight if the solution appears to be
> dead simple to you guys ....
> 

CentOS system administration, like its Red Hat Enterprise Linux parent,
is *extremely* tricky when you mix packages between what's on the
*official* release media and RPMs or source obtained elsewhere. The
packages on the official release media are tested together and work
together. Moreover, they are updated with security fixes, bug fixes and
enhancements automatically. In short, CentOS/RHEL is a *product*.

I maintain a CentOS 5 / PostgreSQL box and I'm continually wasting time
looking for RPMs, installing packages that I absolutely "must" have,
etc. In all likelihood, you will be better off *not* doing that, and
I've pretty much come to the same conclusion for myself. It's a time
sink with no *obvious* payoff in business results. To paraphrase
Garrison Keillor, "If it isn't on the release media, you can probably
live without it."

What I would recommend, therefore, is that you switch to a more flexible
and "bleeding edge" distro. In your case, since you're used to CentOS,
I'd recommend Fedora 7. Other good ones are Ubuntu, openSuSE, Debian and
Gentoo. That way you can run the latest Ruby, openssl, etc., and have
some confidence that things work together and that you'll be able to get
help on the Fedora community forum network when they don't.