ytti / oxidized

Oxidized is a network device configuration backup tool. It's a RANCID replacement!
Apache License 2.0
2.82k stars 932 forks source link

"pkeys are immutable on OpenSSL 3.0" #2602

Closed Chrus3 closed 2 years ago

Chrus3 commented 2 years ago

Not able to pull config from devices using SSL. Getting the following error message:

juniper/SW001 status no_connection, retry attempt 1 10.1.1.2 raised OpenSSL::PKey::PKeyError with msg "pkeys are immutable on OpenSSL 3.0", 10.1.1.2 saved

Running on Ubuntu 22.04.1 LTS.

ssigle commented 2 years ago

Im seeing the same issue. Hoping to find anyone who has found a work around.

mxkissnr commented 2 years ago

Same issue w. Cisco devices on Ubuntu 22.04.1 LTS

... raised OpenSSL::PKey::PKeyError with msg "dh#set_pqg= is incompatible with OpenSSL 3.0", ... saved

Venkarian commented 2 years ago

The same here on Ubuntu 22.04.1 LTS on HP Procurves. Maybe is this because the devices does not use OpenSSL 3.0 ?

d-0-c commented 2 years ago

Same here with Ubiquiti devices on Ubuntu 22.04.01 (5.15.0-47-generic x86_64), OpenSSL 3.0.2-0ubuntu1.6, ruby 1:3.0~exp1 Has anyone found a solution yet?

johnstruse commented 2 years ago

I was running into this error on Ubuntu 22.04 as well. Instead of using the gem which hasn't been updated since mid-2020, I built and installed the latest version from Git which resolved the issue. I ended up needing to build both oxidized and oxidized-web since I'm using the web UI.

Firefishy commented 2 years ago

This is already fixed in https://github.com/ytti/oxidized/pull/2570. Pending release, alternatively use the master branch.

candlerb commented 1 year ago

Any chance of a new release to fix this? 0.28.0 was cut in May 2020. Thanks!

mortzu commented 1 year ago

Yes. I've wanted to make a release for months. But time is short...