OpenSSL version mismatch

Hi there,

I’m using Leap 15.6 and openssl from the openssuse build service. After updating openssl from version 3.5.2 to 3.5.3, sshd no longer starts, giving the error:

OpenSSL version mismatch. Built against 30100040, you have 3050003f

I’m using openssh 9.6p1 but I get the same error with openssh 10.0p2 from the network repository. Muss ich openssh mit openssl 3.5.3 manuell neu kompilieren? Bis einschlieslich Version 3.5.2 hat es problemlos funktioniert.

1 Like

The openssh from network repo is build against openssl 3.1.4, see the build logs.

[ 10s] openssl-3.1.4-150600.2.1 ########################################
[ 10s] openssl-3-3.1.4-150600.5.36.4 ########################################

.
.
[ 15s] libopenssl-3-devel-3.1.4-150600.5.36.4########################################
[ 15s] libopenssl-devel-3.1.4-150600.2.1 ########################################

https://build.opensuse.org/build/network/15.6/x86_64/openssh/_log

Why? What is the reason to use one of the core packages from the third-party repository?

1 Like

Also post, executed as root:

grep -i openssl /var/log/zypp/history
2025-04-16 09:47:59|install|libopenssl3|3.2.4-security.128.3|x86_64||security_tls|5c56427e69a341073adf3cba28b1ba728c979da3b164d666f3daecc2792ccfb2|
2025-04-16 09:47:59|install|openssl-3|3.2.4-security.128.3|x86_64||security_tls|59fd59d8119ad6e9cd4b456381d6a34b4a0984e7f16b4f084039614b0939a3bc|
2025-04-16 09:48:00|install|libopenssl-3-devel|3.2.4-security.128.3|x86_64||security_tls|697e5109072752066d7824fc14ffedb8ae273975aea43a8582099b41b10ce5c7|
2025-04-16 09:48:00|install|php8-openssl|8.2.28-lp156.2.2|x86_64||devel_languages_php_php82|e882f7908f8f9eed0a7d5cdefe7bc3ecc9fbdf25016c70208addbf6def0ecef9|
2025-04-17 08:09:45|install|libopenssl3|3.5.0-security.129.1|x86_64||security_tls|aa3b32a79523c90fd5f48f0fbd5737b0547b70168f1b5ca98f732faf7c0e3b24|
2025-04-17 08:09:45|install|openssl|3.5.0-security.27.1|noarch||security_tls|9c0eca71110d5ac57fda65e1d9d664fef38bb593f62dbf2f54e73ef26d92f2fd|
2025-04-17 08:09:46|install|openssl-3|3.5.0-security.129.1|x86_64||security_tls|6223de32618aaa6180c6a3ddf851676d52e0470406600f696c4c7c3a7bae3dcf|
2025-04-17 08:09:46|install|libopenssl-3-devel|3.5.0-security.129.1|x86_64||security_tls|2b21fbe8d920983b1d83fd8172b3c712ba79df75445ecfd4329e8c59ffabe255|
2025-04-17 08:09:46|install|libopenssl-devel|3.5.0-security.27.1|noarch||security_tls|399951bb987b75022bbae995c8f9c3f15daebf0ed58d4a4c8718fc5b9e8ec68f|
2025-05-14 13:03:42|install|libopenssl3|3.5.0-security.129.3|x86_64||security_tls|cc49fd104255ea60f3f52b1149025e54dbc52a8128d50625bde1eabea841bab3|
2025-05-14 13:03:42|install|openssl-3|3.5.0-security.129.3|x86_64||security_tls|e0f71e8f563e1628e27b8c3d147d314b63dc32f8ccdce04e010c398260892ad1|
2025-05-14 13:03:42|install|libopenssl-3-devel|3.5.0-security.129.3|x86_64||security_tls|7ec46a49fd6255abd1f6b2b7dc5a4bb06667719454bfde8c1e4f214cb1d9cf57|
2025-05-27 13:55:20|install|libopenssl3|3.5.0-security.133.1|x86_64||security_tls|2a66522923bc0093b69bc1e0588de31369ef3dd7be6f0fbc9013eee47be12e8c|
2025-05-27 13:55:20|install|openssl|3.5.0-security.27.2|noarch||security_tls|212a5d65cffbedac963966a55d5d490a4bc0a92379cad80e34e4dc0809c58bea|
2025-05-27 13:55:21|install|openssl-3|3.5.0-security.133.1|x86_64||security_tls|ed8ba1cfebf25d149d29528bf65632e3d47a85d4572c9c5c2daf179a4bcca174|
2025-05-27 13:55:21|install|libopenssl-3-devel|3.5.0-security.133.1|x86_64||security_tls|29153ac2fc36bfc545bbe22c988420bd9e0b826cf4df253df61eb96e82d71ec4|
2025-05-27 13:55:21|install|libopenssl-devel|3.5.0-security.27.2|noarch||security_tls|67cb0965e16d237f1a958616a52516379736905f1af8672a7df4b7567b1a4b94|
2025-05-28 14:12:55|install|libopenssl3|3.5.0-security.135.1|x86_64||security_tls|28d60108d460ac25be96ed3b786f537d59fea2da96a36af5b06fc4735746dcb6|
2025-05-28 14:12:55|install|openssl-3|3.5.0-security.135.1|x86_64||security_tls|fe08db621505596a7a4635b3fec73a7591e9ff4be3bd7cd6892ad6ace11ee236|
2025-05-28 14:12:56|install|libopenssl-3-devel|3.5.0-security.135.1|x86_64||security_tls|46ab8d55122de5bfde34ae0d7c8f7d89acde2600f737647245b8f0412d13c926|
2025-06-24 09:40:02|install|libopenssl3|3.5.0-security.138.1|x86_64||security_tls|fd190f171fcafd8d36709bb58243b3831a824e61cdfc00a55c00277353e54ce1|
2025-06-24 09:40:02|install|openssl-3|3.5.0-security.138.1|x86_64||security_tls|fbdd44ee663abcfec5a4ac32ef36f56cb973cecb63bc5a6fcf5f9af978ffc81b|
2025-06-24 09:40:02|install|libopenssl-3-devel|3.5.0-security.138.1|x86_64||security_tls|9727cdc7814cc9460d5a27d8dc645ee9472075ec370ed084885882f1a39f33ae|
2025-07-21 11:08:09|install|libopenssl3|3.5.1-security.139.1|x86_64||security_tls|cdeadb928f118b702631edff28c8317ea40671a8b7326be0437367564a540879|
2025-07-21 11:08:09|install|openssl|3.5.1-security.28.1|noarch||security_tls|d8eaf59a4a32b0fa051be7dc456dfbd89585cb9453a1d05c1bc60a3ff289ce3d|
2025-07-21 11:08:10|install|openssl-3|3.5.1-security.139.1|x86_64||security_tls|1e2e809280c62bca30ea5e5c82310c052a5dfddffaa9cc11e46e979658673744|
2025-07-21 11:08:10|install|libopenssl-3-devel|3.5.1-security.139.1|x86_64||security_tls|e820dd8d8ce40bc4a34076bdbfa68e963759410b95e669db874e4b9413eb260a|
2025-07-21 11:08:10|install|libopenssl-devel|3.5.1-security.28.1|noarch||security_tls|d8f7ecfb4ac915e86b95017b1213bf459585fa3b17f55f17ce4f8db7eb117fea|
2025-07-21 11:08:27|install|php8-openssl|8.2.29-lp156.1.1|x86_64||devel_languages_php_php82|daf3b4000ff72c7cfecf1597b70ad6aa09100ec1b8c197b37e18730424fe6c21|
2025-08-07 07:35:29|install|python3-pyOpenSSL|21.0.0-150400.10.1|noarch||repo-sle-update|bb009b46c644430f12a63105faff16aef76f77e4f28795a57af91bdb7f385467|
2025-08-07 07:35:30|install|libopenssl3|3.5.2-security.144.1|x86_64||security_tls|24332059b41f57e653c859e28710ab0fff149bcd4d95b1793a02ec81b4bf54a4|
2025-08-07 07:35:30|install|openssl|3.5.2-security.30.1|noarch||security_tls|6c03d516b0d9e1b0c29c3c56f662677232572c9dc04938f947b8c3394709fece|
2025-08-07 07:35:30|install|openssl-3|3.5.2-security.144.1|x86_64||security_tls|c46ab97e1bf405384d552a70fa460ee3cbf6941e32d95fb29350d0ed3b92398d|
2025-08-07 07:35:30|install|libopenssl-3-devel|3.5.2-security.144.1|x86_64||security_tls|aebf5a0269ea7459989a80f64853aef2bc1401bc241253fe0150ddcd136614c0|
2025-08-07 07:35:30|install|libopenssl-devel|3.5.2-security.30.1|noarch||security_tls|ed77e78eaf4ecc1e3e84b57b5e263ad9707ee96c9e22ee9fbd1abd9607929ca4|
2025-08-29 09:20:43|install|libopenssl1_1|1.1.1w-150600.5.15.1|x86_64||repo-sle-update|fa115cf0badfab8dc0062608962847e41c3f3e981b120dab3b1a030fe244f923|
2025-08-29 09:20:43|install|openssl-1_1|1.1.1w-150600.5.15.1|x86_64||repo-sle-update|5c91b398a4fb03785e8fd005436b5d77b6b8fff5cc2b3adb54a47b01dcbee063|
2025-08-29 09:21:19|install|libopenssl3|3.5.2-security.144.5|x86_64||security_tls|3eecf000c607b60f42db8871e14b6c546962909ae38330e967051a113aa9ed91|
2025-08-29 09:21:20|install|openssl|3.5.2-security.31.1|noarch||security_tls|c2f4e8626e522731f4a62f3375f2b64c9233ffcd9d461865d65c1b17009b744a|
2025-08-29 09:21:20|install|openssl-3|3.5.2-security.144.5|x86_64||security_tls|4f97f0f4a422ef16fa30892c6608c8c802d5fe05129cceb22b2cc1ffb2d0b210|
2025-08-29 09:21:20|install|libopenssl-3-devel|3.5.2-security.144.5|x86_64||security_tls|5f714e55807cf1d537e51fb8bf4f78a4e3a037230ab8077222afad077ae92f7e|
2025-08-29 09:21:20|install|libopenssl-devel|3.5.2-security.31.1|noarch||security_tls|707468cc45c9f63f31d5991c609ee0d49481803baa33c4266375100d031ed737|
2025-09-23 07:38:31|install|libopenssl3|3.5.3-security.145.1|x86_64||security_tls|12ce10d8271a9cc7308db374d97bc399c3bc6a30fcc006d87dc33979ad8754ab|
2025-09-23 07:38:31|install|openssl|3.5.3-security.32.1|noarch||security_tls|8bffc7142c3323c653566c7661e9304a364758547364c9cad24c73cd254aefe0|
2025-09-23 07:38:31|install|openssl-3|3.5.3-security.145.1|x86_64||security_tls|25f9594c107eea20de1cf729bee03a4287371d2fdd6d050e7a3e439583fc6946|
2025-09-23 07:38:32|install|libopenssl-3-devel|3.5.3-security.145.1|x86_64||security_tls|18a6cbbc4a1fbdec9b0737896bb14252aa0fdd14649b4f632a7757a6b2d19601|
2025-09-23 07:38:32|install|libopenssl-devel|3.5.3-security.32.1|noarch||security_tls|58453753308eeb395160a726b9669206232938abd8689c2eeb4b8bed9b3e5e16|
2025-09-23 07:38:34|install|php8-openssl|8.2.29-lp156.1.2|x86_64||devel_languages_php_php82|61713004d6c0ecf5de8a5352186a2f8d5678a7cd2e84f095650e5078b67a5713|

I’m surprised it worked without problems until 3.5.2. It must have been built against openssl 3.1.4.

openssl 3.5.3 is the latest version and LTS.

But openssh is not build against openssl 3.5.3…
So why using factory Repos?

If you want the newest versions, use Tumbleweed.

Please next time use Code-Tags for Terminal output:
Code-Tags

Tumbleweed is rolling too fast. We need an stable os but latest openssl LTS.
There is no factory repo. There are also repos for Leap/SLE.

Slowroll?

Developement repos like security_tls and devel_languages_php_php82 are factory repos.

1 Like

@rainer_wahnsinn the question is why? You do realize that with Leap versions any CVE’s etc are backported, if your using some tool that checks versions, then don’t, show whomever the changelog entries…

I’m having the same issue after updating to openssl 3.5.3 in Slowroll 20250901. :grimacing:

Tried reinstalling the openssl and ssh packages but that didn’t fix it. :cold_face:

Rolling back upgrade! :roller_coaster:

pavin@suse-pc:~> openssl --version
OpenSSL 3.5.3 16 Sep 2025 (Library: OpenSSL 3.5.3 16 Sep 2025)
pavin@suse-pc:~> 
pavin@suse-pc:~> ssh demo
OpenSSL version mismatch. Built against 30500020, you have 3050003f
pavin@suse-pc:~> 
pavin@suse-pc:~> lsb_release -r
Release:	20250901

Temp fix

Downgraded and locked openssl packages:

sudo zypper install --oldpackage libopenssl3=3.5.2-1.1 libopenssl3-x86-64-v3=3.5.2-1.1 openssl=3.5.2-1.1 openssl-3=3.5.2-1.1
sudo zypper al libopenssl* openssl*

Reboot :dash:

If you only have the standard Slowroll repositories - open bug report. Otherwise it’s your pieces to keep …

Yes, providing pre-release of 3.5.2 was probably not the best idea. But we cannot change that retroactively.

1 Like

Only SR and code+chrome repos here… :space_invader:

pavin@suse-pc:~> zypper lr -dP
# | Alias         | Name               | Enabled | GPG Check | Refresh | Keep | Priority | Type   | URI                                                           | Service
--+---------------+--------------------+---------+-----------+---------+------+----------+--------+---------------------------------------------------------------+--------
6 | base-update   | base-update        | Yes     | (r ) Yes  | Yes     | -    |   95     | rpm-md | https://mirrorcache-eu.opensuse.org/update/slowroll/repo/oss/ | 
1 | base-debug    | base-debug         | No      | ----      | ----    | -    |   99     | N/A    | https://mirrorcache-eu.opensuse.org/debug/slowroll/repo/oss/  | 
2 | base-non-oss  | base-non-oss       | Yes     | (r ) Yes  | Yes     | -    |   99     | rpm-md | https://mirrorcache-eu.opensuse.org/slowroll/repo/non-oss/    | 
3 | base-openh264 | base-openh264      | Yes     | (r ) Yes  | Yes     | -    |   99     | rpm-md | https://codecs.opensuse.org/openh264/openSUSE_Tumbleweed/     | 
4 | base-oss      | base-oss           | Yes     | (r ) Yes  | Yes     | -    |   99     | rpm-md | https://mirrorcache-eu.opensuse.org/slowroll/repo/oss/        | 
5 | base-source   | base-source        | No      | ----      | ----    | -    |   99     | N/A    | https://mirrorcache-eu.opensuse.org/slowroll/repo/src-oss/    | 
7 | google-chrome | google-chrome      | Yes     | (r ) Yes  | No      | -    |   99     | rpm-md | https://dl.google.com/linux/chrome/rpm/stable/x86_64          | 
8 | vscode        | Visual Studio Code | Yes     | (r ) Yes  | No      | -    |   99     | rpm-md | https://packages.microsoft.com/yumrepos/vscode                | 

I use leap 15.6 with openssl 3.5.3 and openssh 10.p2 from opensuse buildservice. Openssh got a patch that corrects the version check.

https://build.opensuse.org/projects/network/packages/openssh/files/openssh.changes?expand=1

This combination works for me. But openssl 3.5.3 with leap openssh 9.6 does not.

I don’t know if the patch will also make it into leap 15.6. The leap repo has openssl 3.1.4 and openssh 9.6p1, which don’t have any issues.

1 Like

Thanks both of you :tada:

Looks like I just need to wait for the patch to trickle down to SR :grinning:

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.