topic Amazon2023 Image Support in Deployment Strategy

Amazon2023 Image Support

Maharshi — Tue, 22 Aug 2023 04:24:16 GMT

Hi Team,

Does Duo_Unix support the Amazon 2023 Machine Image? We've observed compatibility issues between OpenSSL 1.x and OpenSSL 3.x, with no backward compatibility between them. Which version of Duo_Unix should be used for the Amazon 2023 image on an EC2 instance?

Re: Amazon2023 Image Support

DuoKristina — Thu, 24 Aug 2023 13:19:00 GMT

The latest version of Duo Unix should be fine with OpenSSL 3. I don't think we've specifically tested that release on Amazon Linux 2023 though.

Re: Amazon2023 Image Support

Maharshi — Fri, 25 Aug 2023 11:37:48 GMT

I'm encountering an error with login_duo. Here's the error message:

login_duo: error while loading shared libraries: libssl.so.10: cannot open shared object file: No such file or directory
However, I've noticed that /lib64 has different versions of libssl and libcrypto.
lrwxrwxrwx. 1 root root 15 Jun 8 01:51 libssl.so -> libssl.so.3.0.8
lrwxrwxrwx. 1 root root 15 Jun 8 01:51 libssl.so.3 -> libssl.so.3.0.8
-rwxr-xr-x. 1 root root 689368 Jun 8 01:51 libssl.so.3.0.8
-rwxr-xr-x. 1 root root 435064 Mar 3 16:37 libssl3.so

Re: Amazon2023 Image Support

DuoKristina — Tue, 29 Aug 2023 21:40:58 GMT

Did you build this from source? Which OpenSSL is sshd using? Run ldd $(which sshd) and see if libcrypto is 1 or 3.

Re: Amazon2023 Image Support

DuoKristina — Thu, 31 Aug 2023 15:27:58 GMT

I think you might also have posted this as an issue in our duosecurity/duo_unix GitHub repository as well?

If so, please build login_duo from source instead of trying to use the Fedora package.

If you aren't the same person, the advice to build from source on Amazon Linux still applies. 🙂