Problem to update curl 7.36 / 7.38 on Debian 8 Jessie

For some unknown reason, curl on one of my machines works no more with https, and I don't know how I can upgrade it. This has happened unnoticedly last week.

Error message
From bash command line:
# curl https://localhost
curl: (1) Protocol https not supported or disabled in libcurl
#

Open in new window

(same for any host)

Version
I don't know why the version has now be changed to this https-less version
# curl -V
curl 7.36.0 (x86_64-unknown-linux-gnu) libcurl/7.36.0
Protocols: dict file ftp gopher http imap pop3 rtsp smtp telnet tftp 
Features: IPv6 Largefile 
#

Open in new window


1 - Any idea how this version is now in place?
(no suspect ssh connection logged)

2 - I have tried unsuccessfully to uninstall / reinstall curl
Note that apt-get displays that the version is 7.38/amd64 while curl autoproclams to be 7.36/X86_64

# apt-get remove curl libcurl3
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following packages will be REMOVED:
  curl libcurl3
0 upgraded, 0 newly installed, 2 to remove and 0 not upgraded.
After this operation, 933 kB disk space will be freed.
Do you want to continue? [Y/n] y
(Reading database ... 32395 files and directories currently installed.)
Removing curl (7.38.0-4+deb8u9) ...
Removing libcurl3:amd64 (7.38.0-4+deb8u9) ...
Processing triggers for man-db (2.7.0.2-5) ...
Processing triggers for libc-bin (2.19-18+deb8u10) ...

# apt-get autoclean
Reading package lists... Done
Building dependency tree       
Reading state information... Done

# apt-get purge
Reading package lists... Done
Building dependency tree       
Reading state information... Done
0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded.

# apt-get install curl
Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:
  libcurl3
The following NEW packages will be installed:
  curl libcurl3
0 upgraded, 2 newly installed, 0 to remove and 0 not upgraded.
Need to get 0 B/460 kB of archives.
After this operation, 933 kB of additional disk space will be used.
Do you want to continue? [Y/n] y
Selecting previously unselected package libcurl3:amd64.
(Reading database ... 32380 files and directories currently installed.)
Preparing to unpack .../libcurl3_7.38.0-4+deb8u9_amd64.deb ...
Unpacking libcurl3:amd64 (7.38.0-4+deb8u9) ...
Selecting previously unselected package curl.
Preparing to unpack .../curl_7.38.0-4+deb8u9_amd64.deb ...
Unpacking curl (7.38.0-4+deb8u9) ...
Processing triggers for man-db (2.7.0.2-5) ...
Setting up libcurl3:amd64 (7.38.0-4+deb8u9) ...
Setting up curl (7.38.0-4+deb8u9) ...
Processing triggers for libc-bin (2.19-18+deb8u10) ...

# curl -V
curl 7.36.0 (x86_64-unknown-linux-gnu) libcurl/7.36.0
Protocols: dict file ftp gopher http imap pop3 rtsp smtp telnet tftp 
Features: IPv6 Largefile 
#

Open in new window


             
3 - Any suggestion on how I could solve that by forcing some other version
- by directly installing (how?)
- by changing depot?

Current /etc/apt/sources.list:

# cat /etc/apt/sources.list
deb http://mirrors.online.net/debian jessie main contrib non-free
deb http://mirrors.online.net/debian jessie-updates main contrib

deb http://security.debian.org jessie/updates main contrib

#deb http://security.debian.org/debian-security jessie/updates main 

deb http://security.debian.org/debian-security jessie/updates main contrib non-free
deb-src http://security.debian.org/debian-security jessie/updates main contrib non-free
# 

Open in new window

LVL 29
Bernard S.CTOAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Dr. KlahnPrincipal Software EngineerCommented:
You could download the dpkg from packages.debian.org, and then force it into the system using dpkg --force-all, but this is dangerous to say the least.  All dependencies and warnings are overridden and you  might end up worse off than you are now.

Since curl 7.58 is current, that makes 7.36 rather elderly.  In this situation I'd be inclined to do a full backup of the system, then download the master source kit (link below) and build it.  The procedures you've followed so far suggest that you're well experienced with Debian so building from a non-Debian source kit should not be an obstacle.  During the ./configure you'll have the opportunity to add HTTPS and probably some other options and during the build process you'll discover if any dependency libraries are missing, which is an additional benefit.

https://curl.haxx.se/download.html
1
nociSoftware EngineerCommented:
Did you check jessie-backports for possibly more recent versions?

And it is strange that curl won;t support HTTPS..., might there be a problem with openssl on your system?

ldd $( which curl )  

might show if there is a problem with shared libraries.
1

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Bernard S.CTOAuthor Commented:
On the problematic machine:
# ldd $( which curl )   
        linux-vdso.so.1 (0x00007ffdf9db3000)
        libcurl.so.4 => /usr/local/lib/libcurl.so.4 (0x00007f72bf221000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f72bee76000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f72bf471000)
# 

Open in new window

I ran the same thing on another computer, with the same Debian 8.10
Quite different pictures... so it really puzzles me....
 
# curl -V
curl 7.38.0 (x86_64-pc-linux-gnu) libcurl/7.38.0 OpenSSL/1.0.1t zlib/1.2.8 libidn/1.29 libssh2/1.4.3 librtmp/2.3
Protocols: dict file ftp ftps gopher http https imap imaps ldap ldaps pop3 pop3s rtmp rtsp scp sftp smtp smtps telnet tftp 
Features: AsynchDNS IDN IPv6 Largefile GSS-API SPNEGO NTLM NTLM_WB SSL libz TLS-SRP 

# ldd $( which curl )   
        linux-vdso.so.1 (0x00007fff52581000)
        libcurl.so.4 => /usr/lib/x86_64-linux-gnu/libcurl.so.4 (0x00007f24ebf50000)
        libz.so.1 => /lib/x86_64-linux-gnu/libz.so.1 (0x00007f24ebd35000)
        libpthread.so.0 => /lib/x86_64-linux-gnu/libpthread.so.0 (0x00007f24ebb18000)
        libc.so.6 => /lib/x86_64-linux-gnu/libc.so.6 (0x00007f24eb76d000)
        libidn.so.11 => /usr/lib/x86_64-linux-gnu/libidn.so.11 (0x00007f24eb539000)
        librtmp.so.1 => /usr/lib/x86_64-linux-gnu/librtmp.so.1 (0x00007f24eb31c000)
        libssh2.so.1 => /usr/lib/x86_64-linux-gnu/libssh2.so.1 (0x00007f24eb0f3000)
        libssl.so.1.0.0 => /usr/lib/x86_64-linux-gnu/libssl.so.1.0.0 (0x00007f24eae92000)
        libcrypto.so.1.0.0 => /usr/lib/x86_64-linux-gnu/libcrypto.so.1.0.0 (0x00007f24eaa96000)
        libgssapi_krb5.so.2 => /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2 (0x00007f24ea84b000)
        libkrb5.so.3 => /usr/lib/x86_64-linux-gnu/libkrb5.so.3 (0x00007f24ea577000)
        libk5crypto.so.3 => /usr/lib/x86_64-linux-gnu/libk5crypto.so.3 (0x00007f24ea346000)
        libcom_err.so.2 => /lib/x86_64-linux-gnu/libcom_err.so.2 (0x00007f24ea142000)
        liblber-2.4.so.2 => /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2 (0x00007f24e9f33000)
        libldap_r-2.4.so.2 => /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2 (0x00007f24e9ce1000)
        /lib64/ld-linux-x86-64.so.2 (0x00007f24ec3f1000)
        libgnutls-deb0.so.28 => /usr/lib/x86_64-linux-gnu/libgnutls-deb0.so.28 (0x00007f24e99c2000)
        libhogweed.so.2 => /usr/lib/x86_64-linux-gnu/libhogweed.so.2 (0x00007f24e9793000)
        libnettle.so.4 => /usr/lib/x86_64-linux-gnu/libnettle.so.4 (0x00007f24e9561000)
        libgmp.so.10 => /usr/lib/x86_64-linux-gnu/libgmp.so.10 (0x00007f24e92de000)
        libgcrypt.so.20 => /lib/x86_64-linux-gnu/libgcrypt.so.20 (0x00007f24e8ffd000)
        libdl.so.2 => /lib/x86_64-linux-gnu/libdl.so.2 (0x00007f24e8df9000)
        libkrb5support.so.0 => /usr/lib/x86_64-linux-gnu/libkrb5support.so.0 (0x00007f24e8bed000)
        libkeyutils.so.1 => /lib/x86_64-linux-gnu/libkeyutils.so.1 (0x00007f24e89e9000)
        libresolv.so.2 => /lib/x86_64-linux-gnu/libresolv.so.2 (0x00007f24e87d2000)
        libsasl2.so.2 => /usr/lib/x86_64-linux-gnu/libsasl2.so.2 (0x00007f24e85b6000)
        libp11-kit.so.0 => /usr/lib/x86_64-linux-gnu/libp11-kit.so.0 (0x00007f24e8370000)
        libtasn1.so.6 => /usr/lib/x86_64-linux-gnu/libtasn1.so.6 (0x00007f24e815c000)
        libgpg-error.so.0 => /lib/x86_64-linux-gnu/libgpg-error.so.0 (0x00007f24e7f4a000)
        libffi.so.6 => /usr/lib/x86_64-linux-gnu/libffi.so.6 (0x00007f24e7d41000)
#

Open in new window

Any suggestion or hint?
0
Challenges in Government Cyber Security

Has cyber security been a challenge in your government organization? Are you looking to improve your government's network security? Learn more about how to improve your government organization's security by viewing our on-demand webinar!

Bernard S.CTOAuthor Commented:
Finally solved by deleting some files which were in /usr/local, changing some links to libcurl, desinstalling curl and libcurl, purging dpkg caches and reinstalling.
Now at expected version for Jessie and all Ok.

Your ldd suggestion (and its results) have been essential to help me guessing some directions, thx!
0
Bernard S.CTOAuthor Commented:
Thx for thed comments which led me into the right direction
0
nociSoftware EngineerCommented:
In your case there was a private library of libcurl in /usr/local... messing things up... Good you found it.
1
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Curl

From novice to tech pro — start learning today.