openGauss2.1.0在openEuler 20.03 LTS SP2 安装后，yum无法使用的问题解决

一、环境描述
操作系统：
openEuler 20.03 LTS
openEuler 20.03 LTS SP2
数据库：
openGauss2.1.0
软件包：
openGauss-2.1.0-openEuler-64bit-all.tar.gz
二、安装过程
安装过程自动创建初始用户omm。
三、问题
数据库安装使用正常，但是使用yum，会报错：

[root@node1 ~]# yum list
Traceback (most recent call last):
  File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 14, in swig_import_helper
    return importlib.import_module(mname)
  File "/usr/lib64/python3.7/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
  File "<frozen importlib._bootstrap>", line 1006, in _gcd_import
  File "<frozen importlib._bootstrap>", line 983, in _find_and_load
  File "<frozen importlib._bootstrap>", line 967, in _find_and_load_unlocked
  File "<frozen importlib._bootstrap>", line 670, in _load_unlocked
  File "<frozen importlib._bootstrap>", line 583, in module_from_spec
  File "<frozen importlib._bootstrap_external>", line 1043, in create_module
  File "<frozen importlib._bootstrap>", line 219, in _call_with_frames_removed
ImportError: /lib64/libcurl.so.4: symbol SSLv3_client_method version OPENSSL_1_1_0 not defined in file libssl.so.1.1 with link time reference

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "/usr/bin/yum", line 57, in <module>
    from dnf.cli import main
  File "/usr/lib/python3.7/site-packages/dnf/__init__.py", line 30, in <module>
    import dnf.base
  File "/usr/lib/python3.7/site-packages/dnf/base.py", line 29, in <module>
    import libdnf.transaction
  File "/usr/lib64/python3.7/site-packages/libdnf/__init__.py", line 3, in <module>
    from . import common_types
  File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 17, in <module>
    _common_types = swig_import_helper()
  File "/usr/lib64/python3.7/site-packages/libdnf/common_types.py", line 16, in swig_import_helper
    return importlib.import_module('_common_types')
  File "/usr/lib64/python3.7/importlib/__init__.py", line 127, in import_module
    return _bootstrap._gcd_import(name[level:], package, level)
ModuleNotFoundError: No module named '_common_types'
[root@node1 ~]#

四、问题分析

[root@node1 lib64]# ldd /lib64/libcurl.so.4
  linux-vdso.so.1 (0x00007fff98577000)
  libnghttp2.so.14 (0x00007f06c3221000)
  libidn2.so.0 (0x00007f06c3201000)
  libssh.so.4 (0x00007f06c3180000)
  libpsl.so.5 (0x00007f06c316d000)
  libssl.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 (0x00007f06c30db000)
  libcrypto.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libcrypto.so.1.1 (0x00007f06c2e14000)
  libgssapi_krb5.so.2 (0x00007f06c2dc4000)
  libkrb5.so.3 (0x00007f06c2ce4000)
  libk5crypto.so.3 (0x00007f06c2cc9000)
  libcom_err.so.2 (0x00007f06c2cc3000)
  libldap-2.4.so.2 (0x00007f06c2c76000)
  liblber-2.4.so.2 (0x00007f06c2c63000)
  libbrotlidec.so.1 (0x00007f06c2c54000)
  libz.so.1 (0x00007f06c2c3a000)
  libpthread.so.0 (0x00007f06c2c19000)
  libc.so.6 (0x00007f06c2a58000)
  libunistring.so.2 (0x00007f06c28d4000)
  librt.so.1 (0x00007f06c28c7000)
  /lib64/ld-linux-x86-64.so.2 (0x00007f06c32d9000)
  libdl.so.2 (0x00007f06c28c2000)
  libkrb5support.so.0 (0x00007f06c28b2000)
  libkeyutils.so.1 (0x00007f06c28ac000)
  libresolv.so.2 (0x00007f06c2894000)
  libsasl2.so.3 (0x00007f06c2873000)
  libm.so.6 (0x00007f06c26f0000)
  libbrotlicommon.so.1 (0x00007f06c26cd000)
  libselinux.so.1 (0x00007f06c26a1000)
  libcrypt.so.1 (0x00007f06c2666000)
  libpcre2-8.so.0 (0x00007f06c25d4000)
[root@node1 lib64]# nm  /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1| grep SSLv3_client_method

确实没有SSLv3_client_method

五、解决

1 、下载openssl-1.1.1l，编译：
编译openssl增加enable-ssl3与enable-ssl3-method选项
#
tar -zxvf openssl-1.1.1l.tar.gz
 cd openssl-1.1.1l
./config shared enable-ssl3 enable-ssl3-method
make
make install

检查新编译的文件是否包含SSLv3_client_method：
[root@node1 lib64]# nm /usr/local/lib64/libssl.so.1.1 | grep SSLv3_client_method
00000000000214f0 T SSLv3_client_method
编译完成后是有SSLv3_client_method
编译好的库拷贝替换原来的libssl.so.1.1：

[root@node1 lib64]# cp /usr/local/lib64/libssl.so.1.1 /opt/software/openGauss/script/gspylib/clib/
cp: overwrite '/opt/software/openGauss/script/gspylib/clib/libssl.so.1.1'? y
[root@node1 lib64]#
检查：
[root@node1 lib64]# nm  /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1| grep SSLv3_client_method
00000000000214f0 T SSLv3_client_method

至此，该文件正常。

yum测试：
[root@node1 lib64]# yum install -y tree
Last metadata expiration check: 0:29:30 ago on Tue 23 Nov 2021 11:15:02 AM CST.
Package tree-1.7.0-18.oe1.x86_64 is already installed.
Dependencies resolved.
Nothing to do.
Complete!
修复完成，yum正常使用

六、深入问题

[root@node1 lib64]# ldd /lib64/libcurl.so.4
  linux-vdso.so.1 (0x00007fff98577000)
  libnghttp2.so.14 (0x00007f06c3221000)
  libidn2.so.0 (0x00007f06c3201000)
  libssh.so.4 (0x00007f06c3180000)
  libpsl.so.5 (0x00007f06c316d000)
  **libssl.so.1.1 => /opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 (0x00007f06c30db000)**

操作系统默认libssl.so.1.1链接到/lib64目录中，但是安装数据库后
发现libssl.so.1.1链接到/opt/software/openGauss/script/gspylib/clib/libssl.so.1.1 ，
怀疑安装脚本有问题。
这里参考曾庆峰老师的解决方案：
“先创建omm用户dbgrp组，预安装时就不再创建omm”，安装后，yum可以使用。
七、最简单方法
按照官方文档正常安装，yum报错，只需要：
vim /etc/profile
#export LD_LIBRARY_PATH=/opt/software/openGauss/script/gspylib/clib:
#export PATH=/root/gauss_om/omm/script:$PATH
重启即可。

原因：
估计是安装脚本有问题。