openSUSE Tumbleweed - nothing provides 'libopenssl1_0_0'

[NKnusperer]

When trying to install dotnet-sdk-9.0 on openSUSE Tumbleweed (20250307) using the these instructions, the installation fails as follows:

Problem: 1: nothing provides 'libopenssl1_0_0' needed by the to be installed dotnet-runtime-deps-9.0-9.0.2-1.x86_64
 Solution 1: do not install dotnet-runtime-deps-9.0-9.0.2-1.x86_64
 Solution 2: break dotnet-runtime-deps-9.0-9.0.2-1.x86_64 by ignoring some of its dependencies

There is no compat-openssl10 package available as well.
When continue with Solution 2 the installation is broken:

> dotnet --info
You must install or update .NET to run this application.

App: /usr/share/dotnet/sdk/9.0.200/dotnet.dll
Architecture: x64
Framework: 'Microsoft.NETCore.App', version '9.0.2' (x64)
.NET location: /usr/share/dotnet/

The following frameworks were found:
  9.0.0 at [/usr/share/dotnet/shared/Microsoft.NETCore.App]

Learn more:
https://aka.ms/dotnet/app-launch-failed

To install missing framework, download:
https://aka.ms/dotnet-core-applaunch?framework=Microsoft.NETCore.App&framework_version=9.0.2&arch=x64&rid=linux-x64&os=opensuse-tumbleweed.20250307

Host:
  Version:      9.0.2
  Architecture: x64
  Commit:       80aa709f5d
  RID:          linux-x64

.NET SDKs installed:
  9.0.200 [/usr/share/dotnet/sdk]

.NET runtimes installed:
  Microsoft.AspNetCore.App 9.0.0 [/usr/share/dotnet/shared/Microsoft.AspNetCore.App]
  Microsoft.NETCore.App 9.0.0 [/usr/share/dotnet/shared/Microsoft.NETCore.App]

Other architectures found:
  None

Environment variables:
  Not set

global.json file:
  Not found

Learn more:
  https://aka.ms/dotnet/info

Download .NET:
  https://aka.ms/dotnet/download

> dotnet new console
You must install or update .NET to run this application.

App: /usr/share/dotnet/sdk/9.0.200/dotnet.dll
Architecture: x64
Framework: 'Microsoft.NETCore.App', version '9.0.2' (x64)
.NET location: /usr/share/dotnet/

The following frameworks were found:
  9.0.0 at [/usr/share/dotnet/shared/Microsoft.NETCore.App]

It looks like #112671 has changed it to libopenssl3, which is already installed on my system, but it seems that this is for .NET 10 ?

[NikolaMilosavljevic]

[Triage] @jkoritzinsky can libopenssl3 be used in .NET 9, instead? We'd need to update the dependency if that's the right choice.

[jkoritzinsky]

Yes, we can use OpenSSL3 in .NET 9.

[NKnusperer]

libopenssl3 is installed.

> zypper se libopenssl
Loading repository data...
Reading installed packages...

S  | Name                                 | Summary                                               | Type
---+--------------------------------------+-------------------------------------------------------+--------
   | libopenssl-3-devel                   | Development files for OpenSSL                         | package
   | libopenssl-3-devel-32bit             | Development files for OpenSSL                         | package
i  | libopenssl-3-fips-provider           | OpenSSL FIPS provider                                 | package
   | libopenssl-3-fips-provider-32bit     | OpenSSL FIPS provider                                 | package
i  | libopenssl-3-fips-provider-x86-64-v3 | OpenSSL FIPS provider                                 | package
   | libopenssl-devel                     | Include Files and Libraries mandatory for Development | package
   | libopenssl-fips-provider             | Include Files and Libraries mandatory for Development | package
i  | libopenssl3                          | Secure Sockets and Transport Layer Security           | package
   | libopenssl3-32bit                    | Secure Sockets and Transport Layer Security           | package
i  | libopenssl3-x86-64-v3                | Secure Sockets and Transport Layer Security           | package

I think there are two different issues here, first the wrong package dependency and second that versioning is somehow wrong.

> dotnet --list-sdks
9.0.201 [/usr/share/dotnet/sdk]
> dotnet --list-runtimes
Microsoft.AspNetCore.App 9.0.0 [/usr/share/dotnet/shared/Microsoft.AspNetCore.App]
Microsoft.NETCore.App 9.0.0 [/usr/share/dotnet/shared/Microsoft.NETCore.App]

The SDK looks fine but the reported runtime version is 9.0.0 instead of 9.0.3 which may lead to the reported error You must install or update .NET to run this application.

[NKnusperer]

I renamed the directory in /usr/share/dotnet/shared/Microsoft.AspNetCore.App and /usr/share/dotnet/shared/Microsoft.NETCore.App from 9.0.0 to 9.0.3 and now everything is working as expected.

[NKnusperer]

@NikolaMilosavljevic @jkoritzinsky could it be that the openSUSE repository is actually shipping an outdated runtime?
I just realized that both Environment.Version and RuntimeInformation.FrameworkDescription are returning 9.0.0 instead of 9.0.3. The AssemblyInformationalVersionAttribute of mscorlib.dll is 9.0.0+9d5a6a9aa463d6d10b0b0ba6d5982cc82f363dc3 (9d5a6a9).

[NikolaMilosavljevic]

@NikolaMilosavljevic @jkoritzinsky could it be that the openSUSE repository is actually shipping an outdated runtime? I just realized that both Environment.Version and RuntimeInformation.FrameworkDescription are returning 9.0.0 instead of 9.0.3. The AssemblyInformationalVersionAttribute of mscorlib.dll is 9.0.0+9d5a6a9aa463d6d10b0b0ba6d5982cc82f363dc3 (9d5a6a9).

Repository contains the correct packages: https://packages.microsoft.com/opensuse/15/prod/Packages/d/

The root cause of this issue (libssl dependency) is being fixed with 9.0.5 release: #113548

Hopefully that would resolve the other issue you hit that required manual steps and workaround.

[dirkmueller]

similarly to tumbleweed, this also affects the most recent update of 8.0 and 9.0 on the sle15 repository:

 Problem: 1: nothing provides 'libopenssl1_0_0' needed by the to be installed dotnet-runtime-deps-8.0-8.0.15-1.x86_64
  Solution 1: do not install dotnet-runtime-deps-8.0-8.0.15-1.x86_64
  Solution 2: break dotnet-runtime-deps-8.0-8.0.15-1.x86_64 by ignoring some of its dependencies

This is not immediately visible to users installing via zypper because the dependencies allow to stay on dotnet-runtime-deps-8.0-8.0.14 which still has fulfillable dependencies. so users will not see the issue immediately and then run an insecure or potentially unsupportable setup.

[leecow]

@NikolaMilosavljevic and @jkoritzinsky - do we have an issue to track updating the sles runtime-deps to use libopenssl_1_1_1?

[NikolaMilosavljevic]

@NikolaMilosavljevic and @jkoritzinsky - do we have an issue to track updating the sles runtime-deps to use libopenssl_1_1_1?

We've updated the openSuse deps file to use libopenssl3 in both 10.0 (#112671) and 9.0 (#113548)

[dirkmueller]

libopenssl3 is correct for both SLES and Leap 15.6 or newer.