Rocky Linux 9.8: issue with openssl-1:3.5.5-5.el9_8.x86_64

Rocky Linux Help & Support
1

Hello there!

This is my first post here so please pardon if I miss something. I already used the search but couldn’t find any post regarding my issue.

Today, we updated OpenSSL package on our Rocky Linux 9.8 machines from openssl-1:3.5.5-4.el9_8.x86_64 to openssl-1:3.5.5-5.el9_8.x86_64 through dnf update automatically as the new version was released in the Rocky 9 BaseOS repository on 15th July.

After the update, an Ansible task of us using the uri-module threw an error:

"msg": "Status code was -1 and not [200]: Connection failure: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4192)"

A downgrade of the OpenSSL package fixed the problem.

Additional information

python3.9 --version

Python 3.9.25

ansible --version

ansible [core 2.14.18]

Steps to reproduce

Execute the following code against a Rocky Linux 9.8 machine with openssl-1:3.5.5-5.el9_8.x86_64 installed:

ansible <your_ssh_host_here>, \
  -i <your_ssh_host_here>, \
  -b \
  -m uri \
  -a '{"url": "https:/www.google.com", "method": "GET"}'

The issue might be related to python3.9 as well.

2

The Bug fix (bug only on RHEL9) is part of the latest update for python3 in RHEL9, I do not see it in Rocky Linux 9 repo’s yet.

https://access.redhat.com/errata/RHSA-2026:39798

3

Hey, I was able to reproduce this (thanks for the easy reproducer) and we’re pushing out a python3.9 update that fixes this in today’s update. It’s now available on dl.rockylinux.org and should propagate to the mirrors over the next few hours.

4

Thanks! Confirmed, the update made my Ansible installations operational again, after forcing dl.rockylinux.org as the repo URL for baseos.

5

Hello,

I am facing the same issue but with python 3.11 in Rocky Linux 9.8

rpm -qa | grep -i openssl
openssl-fips-provider-3.5.5-5.el9_8.x86_64
openssl-libs-3.5.5-5.el9_8.x86_64
openssl-3.5.5-5.el9_8.x86_64

python3.11 --version
Python 3.11.13

rpm -qa | grep -i python3.11
python3.11-setuptools-wheel-65.5.1-5.el9.noarch
python3.11-pip-wheel-22.3.1-6.el9.noarch
python3.11-3.11.13-10.el9_8.x86_64
python3.11-libs-3.11.13-10.el9_8.x86_64
python3.11-setuptools-65.5.1-5.el9.noarch
python3.11-pip-22.3.1-6.el9.noarch
python3.11-wheel-0.38.4-3.el9.noarch

/usr/local/bin/ansible-playbook --version
ansible-playbook [core 2.18.18]

/usr/local/bin/ansible localhost -i localhost, -c local -m ansible.builtin.uri -a 'url=https://www.google.com method=GET status_code=200 timeout=15' -e ansible_python_interpreter=/usr/bin/python3.11
localhost | FAILED! => {
"changed": false,
"elapsed": 0,
"msg": "Status code was -1 and not [200]: Connection failure: [ASN1: NOT_ENOUGH_DATA] not enough data (_ssl.c:4045)",
"redirected": false,
"status": -1,
"url": "``https://www.google.com``"
}

With ansible_python_interpreter3.9 it is working properly.