Rocky Linux 9.7 Issues with Mod_SSL OpenSSL

Rocky Linux Help & Support
1

Something really got messed up on our server all because an update could not download from a repo. It was suggested that we vi /etc/yum.repos.d/rocky-extras.repo and comment out all the mirrorlist and uncomment the base* urls then run a few commands. But this seemed to have cause more issues than fixes. We are worried we will loose the ability to use SSH DNF etc. This was where the problem started.

2026-04-15T04:15:49-0700 DEBUG error: Curl error (28): Timeout was reached for http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out] (http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml).
2026-04-15T04:15:49-0700 WARNING Errors during downloading metadata for repository ‘baseos’:

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 67, in main
return _main(base, args, cli_class, option_parser_class)
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 106, in _main
return cli_run(cli, base)
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 122, in cli_run
cli.run()
File “/usr/lib/python3.9/site-packages/dnf/cli/cli.py”, line 1130, in run
return self.command.run()
File “/usr/lib/python3.9/site-packages/dnf/cli/commands/makecache.py”, line 50, in run
return self.base.update_cache(timer)
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 384, in update_cache
self.fill_sack(load_system_repo=False, load_available_repos=True) # performs the md sync
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 413, in fill_sack
self._add_repo_to_sack(r)
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 142, in _add_repo_to_sack
repo.load()
File “/usr/lib/python3.9/site-packages/dnf/repo.py”, line 581, in load
raise dnf.exceptions.RepoError(str(e))
dnf.exceptions.RepoError: Failed to download metadata for repo ‘baseos’: Cannot download repomd.xml: Curl error (28): Timeout was reached for http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]
2026-04-15T04:15:49-0700 CRITICAL Error: Failed to download metadata for repo ‘baseos’: Cannot download repomd.xml: Curl error (28): Timeout was reached for http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]

Now we have this error;

2026-04-16T12:07:41-0700 CRITICAL Error:
Problem: package mod_ssl-1:2.4.65-1.module_codeit.codeit.el9.x86_64 from @System requires libcrypto.so.81.3()(64bit), but none of the providers can be installed

  • package mod_ssl-1:2.4.65-1.module_codeit.codeit.el9.x86_64 from @System requires libcrypto.so.81.3(OPENSSL_3.0.0)(64bit), but none of the providers can be installed
  • package mod_ssl-1:2.4.65-1.module_codeit.codeit.el9.x86_64 from @System requires libssl.so.81.3()(64bit), but none of the providers can be installed
  • package mod_ssl-1:2.4.65-1.module_codeit.codeit.el9.x86_64 from @System requires libssl.so.81.3(OPENSSL_3.0.0)(64bit), but none of the providers can be installed
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.6-1.codeit.el9.x86_64 from @System
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.10-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.11-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.12-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.13-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.14-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.15-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.16-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.8-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-3.0.9-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.0-2.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.1-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.4-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.5-1.codeit.el9.x86_64 from CodeIT
  • cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86_64 from CodeIT and openssl-quic-libs-1:3.5.6-1.codeit.el9.x86_64 from CodeIT
  • cannot install the best update candidate for package openssl-quic-libs-1:3.5.6-1.codeit.el9.x86_64
  • problem with installed package mod_ssl-1:2.4.65-1.module_codeit.codeit.el9.x86_64
    2026-04-16T12:07:41-0700 INFO (try to add ‘–allowerasing’ to command line to replace conflicting packages or ‘–skip-broken’ to skip uninstallable packages or ‘–nobest’ to use not only best candidate packages)

Thanks

2

This is not a package that belongs to any of the Rocky mirrors so no idea where you installed this from. But it seems you are using a codeit repository that is the cause of your problems. And that package is looking for a dependency, that also isn’t provided by any of the Rocky repositories.

I suggest you ask the maintainers of the codeit repository to fix their packages or tell you what repositories need to be enabled to install the dependencies that their packages require.

Also, change your rocky-*.repo files back to mirrorlist instead of using base_url so that it can automatically choose different mirrors. But even without this, none of the Rocky repositories were the cause of the problem here - the problem is the third-party repository you are using that the Rocky team isn’t responsible for.

3

Thank you so the suggestion is to use SWAP but it could render the OS uselss after that as this may not work. Yes i did switch back but the damnage seems to have been done.

Nsolid Packages for Linux RPM based distros - x86_64 5.5 MB/s | 978 kB 00:00
Node.js Packages for Linux RPM based distros - x86_64 5.7 MB/s | 1.1 MB 00:00
CodeIT for Enterprise Linux 9 (x86_64) 1.6 MB/s | 829 kB 00:00
Extra Packages for Enterprise Linux 9 - x86_64 8.8 MB/s | 21 MB 00:02
Extra Packages for Enterprise Linux 9 openh264 (From Cisco) - x86_64 2.8 kB/s | 2.5 kB 00:00
kernelcare 7.3 kB/s | 11 kB 00:01
LiteSpeed Tech Repository for CentOS 9 - x86_64 476 kB/s | 245 kB 00:00
LiteSpeed Tech Update Repository for CentOS 9 - x86_64 434 kB/s | 211 kB 00:00
MariaDB 2.3 MB/s | 640 kB 00:00
nginx stable repo 231 kB/s | 73 kB 00:00
Remi’s Modular repository for Enterprise Linux 9 - x86_64 600 kB/s | 946 kB 00:01
Safe Remi’s RPM repository for Enterprise Linux 9 - x86_64 788 kB/s | 1.4 MB 00:01
Rocky Linux 9 - BaseOS 4.4 MB/s | 19 MB 00:04
Rocky Linux 9 - AppStream 2.5 MB/s | 18 MB 00:07
Rocky Linux 9 - Extras 30 kB/s | 17 kB 00:00
Error:

How do we fix the problems? Also, i dont see any codeit repositories in /etc/yum.repos.d/rocky-extras.repo. The even changing over to base its still looking for dl.rockylinux.org and connects to the repo. The origional error was that it could not connect to extra hence the reason why it was suggested to block out mirrorlist.

We install kernalcare yesterday. Is it possible that this is the culprit? It seems there was a update too it but no errors that i could see and the license we bought promised that it works on RL 9.x.

4

cant i just remove mod_ssl?

rpm -qa | grep mod_ssl
mod_ssl-2.4.65-1.module_codeit.codeit.el9.x86_64

openssl-libs-3.5.1-7.el9_7.x86_64?

openssl-quic-libs-3.5.6-1.codeit.el9.x86_64

I mean no depenancies were installed anyway.

5

Yes you can remove it if you don’t need it. I would also be tempted to do:

rpm -qa | grep codeit

and remove any other packages from that repository if you don’t need it. Rocky has mod_ssl albeit a slightly older version than the one in the codeit repository. So whether you need the newer one for a reason or not is up to you. Or if you even need it at all, since it’s used by Apache Web Server.