# Rocky Linux 9.7 Issues with Mod\_SSL OpenSSL

**URL:** <https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354>\
**Category:** Rocky Linux Help & Support\
**Tags:** rocky-linux-9\
**Created:** [April 16, 2026, 7:31pm UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354 "2026-04-16T19:31:21Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![Mikie46](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@Mikie46](https://forums.rockylinux.org/u/Mikie46)\
**Post date:** [April 16, 2026, 7:31pm UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/1 "2026-04-16T19:31:21Z")

</div>

Something really got messed up on our server all because an update could not download from a repo. It was suggested that we vi /etc/yum.repos.d/rocky-extras.repo and comment out all the mirrorlist and uncomment the base\* urls then run a few commands. But this seemed to have cause more issues than fixes. We are worried we will loose the ability to use SSH DNF etc. This was where the problem started.

2026-04-15T04:15:49-0700 DEBUG error: Curl error (28): Timeout was reached for [http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml) [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out] ([http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml)).  
2026-04-15T04:15:49-0700 WARNING Errors during downloading metadata for repository ‘baseos’:

- Curl error (28): Timeout was reached for [http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml) [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]  
2026-04-15T04:15:49-0700 DDEBUG Cleaning up.  
2026-04-15T04:15:49-0700 DDEBUG Plugins were unloaded.  
2026-04-15T04:15:49-0700 SUBDEBUG  
Traceback (most recent call last):  
File “/usr/lib/python3.9/site-packages/dnf/repo.py”, line 574, in load  
ret = self.\_repo.load()  
File “/usr/lib64/python3.9/site-packages/libdnf/repo.py”, line 331, in load  
return \_repo.Repo\_load(self)  
libdnf.\_error.Error: Failed to download metadata for repo ‘baseos’: Cannot download repomd.xml: Curl error (28): Timeout was reached for [http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml) [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]

During handling of the above exception, another exception occurred:

Traceback (most recent call last):  
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 67, in main  
return \_main(base, args, cli\_class, option\_parser\_class)  
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 106, in \_main  
return cli\_run(cli, base)  
File “/usr/lib/python3.9/site-packages/dnf/cli/main.py”, line 122, in cli\_run  
cli.run()  
File “/usr/lib/python3.9/site-packages/dnf/cli/cli.py”, line 1130, in run  
return self.command.run()  
File “/usr/lib/python3.9/site-packages/dnf/cli/commands/makecache.py”, line 50, in run  
return self.base.update\_cache(timer)  
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 384, in update\_cache  
self.fill\_sack(load\_system\_repo=False, load\_available\_repos=True) # performs the md sync  
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 413, in fill\_sack  
self.\_add\_repo\_to\_sack(r)  
File “/usr/lib/python3.9/site-packages/dnf/base.py”, line 142, in \_add\_repo\_to\_sack  
repo.load()  
File “/usr/lib/python3.9/site-packages/dnf/repo.py”, line 581, in load  
raise dnf.exceptions.RepoError(str(e))  
dnf.exceptions.RepoError: Failed to download metadata for repo ‘baseos’: Cannot download repomd.xml: Curl error (28): Timeout was reached for [http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml) [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]  
2026-04-15T04:15:49-0700 CRITICAL Error: Failed to download metadata for repo ‘baseos’: Cannot download repomd.xml: Curl error (28): Timeout was reached for [http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86\_64/os/repodata/repomd.xml](http://ftp.yz.yamagata-u.ac.jp/pub/Linux/rocky-linux/9.7/BaseOS/x86_64/os/repodata/repomd.xml) [Failed to connect to ftp.yz.yamagata-u.ac.jp port 80: Connection timed out]

Now we have this error;

2026-04-16T12:07:41-0700 CRITICAL Error:  
Problem: package mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64 from @System requires libcrypto.so.81.3()(64bit), but none of the providers can be installed

- package mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64 from @System requires libcrypto.so.81.3(OPENSSL\_3.0.0)(64bit), but none of the providers can be installed
- package mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64 from @System requires libssl.so.81.3()(64bit), but none of the providers can be installed
- package mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64 from @System requires libssl.so.81.3(OPENSSL\_3.0.0)(64bit), but none of the providers can be installed
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.6-1.codeit.el9.x86\_64 from @System
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.10-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.11-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.12-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.13-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.14-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.15-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.16-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.8-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-3.0.9-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.0-2.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.1-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.4-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.5-1.codeit.el9.x86\_64 from CodeIT
- cannot install both openssl-quic-libs-1:4.0.0-1.codeit.el9.x86\_64 from CodeIT and openssl-quic-libs-1:3.5.6-1.codeit.el9.x86\_64 from CodeIT
- cannot install the best update candidate for package openssl-quic-libs-1:3.5.6-1.codeit.el9.x86\_64
- problem with installed package mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64  
2026-04-16T12:07:41-0700 INFO (try to add ‘–allowerasing’ to command line to replace conflicting packages or ‘–skip-broken’ to skip uninstallable packages or ‘–nobest’ to use not only best candidate packages)

Thanks

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [April 16, 2026, 9:21pm UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/2 "2026-04-16T21:21:53Z")

</div>

> [@Mikie46](#):
>
> mod\_ssl-1:2.4.65-1.module\_codeit.codeit.el9.x86\_64

This is not a package that belongs to any of the Rocky mirrors so no idea where you installed this from. But it seems you are using a `codeit` repository that is the cause of your problems. And that package is looking for a dependency, that also isn’t provided by any of the Rocky repositories.

I suggest you ask the maintainers of the `codeit` repository to fix their packages or tell you what repositories need to be enabled to install the dependencies that their packages require.

Also, change your rocky-\*.repo files back to mirrorlist instead of using base\_url so that it can automatically choose different mirrors. But even without this, none of the Rocky repositories were the cause of the problem here - the problem is the third-party repository you are using that the Rocky team isn’t responsible for.

---

<div class="post-metadata">

**Author:** ![Mikie46](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@Mikie46](https://forums.rockylinux.org/u/Mikie46)\
**Post date:** [April 16, 2026, 10:04pm UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/3 "2026-04-16T22:04:33Z")

</div>

Thank you so the suggestion is to use SWAP but it could render the OS uselss after that as this may not work. Yes i did switch back but the damnage seems to have been done.

Nsolid Packages for Linux RPM based distros - x86\_64 5.5 MB/s | 978 kB 00:00  
Node.js Packages for Linux RPM based distros - x86\_64 5.7 MB/s | 1.1 MB 00:00  
CodeIT for Enterprise Linux 9 (x86\_64) 1.6 MB/s | 829 kB 00:00  
Extra Packages for Enterprise Linux 9 - x86\_64 8.8 MB/s | 21 MB 00:02  
Extra Packages for Enterprise Linux 9 openh264 (From Cisco) - x86\_64 2.8 kB/s | 2.5 kB 00:00  
kernelcare 7.3 kB/s | 11 kB 00:01  
LiteSpeed Tech Repository for CentOS 9 - x86\_64 476 kB/s | 245 kB 00:00  
LiteSpeed Tech Update Repository for CentOS 9 - x86\_64 434 kB/s | 211 kB 00:00  
MariaDB 2.3 MB/s | 640 kB 00:00  
nginx stable repo 231 kB/s | 73 kB 00:00  
Remi’s Modular repository for Enterprise Linux 9 - x86\_64 600 kB/s | 946 kB 00:01  
Safe Remi’s RPM repository for Enterprise Linux 9 - x86\_64 788 kB/s | 1.4 MB 00:01  
Rocky Linux 9 - BaseOS 4.4 MB/s | 19 MB 00:04  
Rocky Linux 9 - AppStream 2.5 MB/s | 18 MB 00:07  
Rocky Linux 9 - Extras 30 kB/s | 17 kB 00:00  
Error:

How do we fix the problems? Also, i dont see any codeit repositories in /etc/yum.repos.d/rocky-extras.repo. The even changing over to base its still looking for [dl.rockylinux.org](http://dl.rockylinux.org) and connects to the repo. The origional error was that it could not connect to extra hence the reason why it was suggested to block out mirrorlist.

We install kernalcare yesterday. Is it possible that this is the culprit? It seems there was a update too it but no errors that i could see and the license we bought promised that it works on RL 9.x.

---

<div class="post-metadata">

**Author:** ![Mikie46](https://avatars.discourse-cdn.com/v4/letter/m/838e76/32.png) [@Mikie46](https://forums.rockylinux.org/u/Mikie46)\
**Post date:** [April 16, 2026, 10:35pm UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/4 "2026-04-16T22:35:36Z")

</div>

cant i just remove mod\_ssl?

rpm -qa | grep mod\_ssl  
mod\_ssl-2.4.65-1.module\_codeit.codeit.el9.x86\_64

openssl-libs-3.5.1-7.el9\_7.x86\_64?

openssl-quic-libs-3.5.6-1.codeit.el9.x86\_64

I mean no depenancies were installed anyway.

---

<div class="post-metadata">

**Author:** ![iwalker](https://sea2.discourse-cdn.com/flex020/user_avatar/forums.rockylinux.org/iwalker/32/2599_2.png) [@iwalker](https://forums.rockylinux.org/u/iwalker)\
**Post date:** [April 17, 2026, 7:00am UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/5 "2026-04-17T07:00:00Z")

</div>

Yes you can remove it if you don’t need it. I would also be tempted to do:

```auto
rpm -qa | grep codeit

```

and remove any other packages from that repository if you don’t need it. Rocky has mod\_ssl albeit a slightly older version than the one in the codeit repository. So whether you need the newer one for a reason or not is up to you. Or if you even need it at all, since it’s used by Apache Web Server.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\
**Post date:** [June 16, 2026, 7:00am UTC](https://forums.rockylinux.org/t/rocky-linux-9-7-issues-with-mod-ssl-openssl/20354/6 "2026-06-16T07:00:21Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
