Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add guidance for Amazon Linux, RedHat Enterprise Linux, wrt OpenSSL versions #3016

Closed
sethmlarson opened this issue May 4, 2023 · 1 comment · Fixed by #3018
Closed

Add guidance for Amazon Linux, RedHat Enterprise Linux, wrt OpenSSL versions #3016

sethmlarson opened this issue May 4, 2023 · 1 comment · Fixed by #3018

Comments

@sethmlarson
Copy link
Member

This error has been cropping up in a few GitHub issues/comments:

ImportError: urllib3 v2.0 only supports OpenSSL 1.1.1+, currently the 'ssl' module is compiled with OpenSSL 1.0.2k-fips  26 Jan 2017. See: https://github.com/urllib3/urllib3/issues/2168

There's likely some additional guidance we can give folks that are receiving this error in our v2 migration guide:

  • Create a separate section for this issue and how to mitigate it
  • Have this error message verbatim in the migration guide under the section
  • Mention specifically Amazon Linux and RHEL, but also other platforms we're aware of
  • Recommend to users to figure out if they can upgrade their OpenSSL version or platform to get onto an OpenSSL release which is receiving security releases
  • If they can't, then they need to pin urllib3<2 until they do.
@cmawhorter
Copy link

on amazon linux 2, openssl 1.1 is available as a different package named openssl11

this worked for me w/pyenv:

  1. remove (or don't install) openssl-devel
  2. yum install openssl11 openssl11-devel
  3. pyenv install 3.9

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants