Error: tcpdump depends on libssl1.1 but it is not installable during Gateway 11.2 upgrade

Products

• CA API Gateway

Issue/Introduction

During the Layer7 API Gateway 11.2 in-place upgrade, the oneClickUpgrade.sh script may fail during the platformUpdate phase. This occurs when the system identifies additional packages that are incompatible with the target Operating System (Debian 13).

Environment

• Layer7 API Gateway 11.1.x upgrading to 11.2
• Appliances with tcpdump installed via older support packs or manual RPMs.

Cause

The 11.2 upgrade migrates the Gateway to Debian 13. The version of tcpdump previously installed depends on libssl1.1, which is deprecated and unavailable in the Debian 13 repositories. This creates a dependency "deadlock" that prevents the upgrade from proceeding.

Resolution

1. Log in to the Gateway as the ssgconfig or root user.
2. Remove the conflicting tcpdump package:
   bash

    

   apt-get remove tcpdump

3. Run the ssg-inplace-upgrade-readiness-checker.sh script to verify all other package deviations are resolved.
4. Rerun the upgrade script:
   bash

    

   ./oneClickUpgrade.sh --major 11.2.0 22643 --config /home/ssgconfig/db_config.conf --reboot yes

5. If a packet capture utility is required after the upgrade, use the native version provided with the Gateway 11.2 environment.

Additional Information

• See Contact Support for further assistance.
• Review the Gateway 11.2 Release Notes for detailed OS changes.