Rocky Linux 10.1, Nagvis, php

Troubleshooting
,
1

CMK version: 2.4.0p17 CEE
OS version: Rocky Linux 10.1

Error: php: /omd/sites/mon24/lib/libcrypto.so.3: version `OPENSSL_3.2.0’ not found

On freshly installed last version of the checkmk Enterprise I have got a problem with php and Nagvis. In checkmk site the php cannot find the appropriate openssl library:

[root@TESTROCKY ~]# omd su mon24
Last login: Fri Dec 12 09:35:15 CET 2025 on pts/2
OMD[mon24]:~$ php -v
php: /omd/sites/mon24/lib/libcrypto.so.3: version `OPENSSL_3.2.0’ not found (required by php)

Because of that the Nagvis gets the error 500 and the errors in apache log are as follows:

[Fri Dec 12 09:21:51.366939 2025] [core:error] [pid 9875:tid 9875] [client 127.0.0.1:57624] End of script output before headers: ajax_handler.php, referer: http://10.30.4.22/mon24/check_mk/index.py?start_url=%2Fmon24%2Fcheck_mk%2Fdashboard.py
/usr/bin/php-cgi: /omd/sites/mon24/lib/libcrypto.so.3: version `OPENSSL_3.2.0’ not found (required by /usr/bin/php-cgi)
[Fri Dec 12 09:23:41.324514 2025] [fcgid:warn] [pid 9961:tid 9961] (104)Connection reset by peer: [client 127.0.0.1:40798] mod_fcgid: error reading data from FastCGI server, referer: http://10.30.4.22/mon24/check_mk/
[Fri Dec 12 09:23:41.324547 2025] [core:error] [pid 9961:tid 9961] [client 127.0.0.1:40798] End of script output before headers: ajax_handler.php, referer: http://10.30.4.22/mon24/check_mk/

On Rocky Linux the php and openssl version are:

[root@TEST-ROCKY ~]# php -v
PHP 8.3.19 (cli) (built: Mar 12 2025 13:10:27) (NTS gcc x86_64)
Copyright (c) The PHP Group
Zend Engine v4.3.19, Copyright (c) Zend Technologies
with Zend OPcache v8.3.19, Copyright (c), by Zend Technologies

[root@TEST-ROCKY ~]# openssl version
OpenSSL 3.5.1 1 Jul 2025 (Library: OpenSSL 3.5.1 1 Jul 2025)

But in 2.4.0p17 checkmk site:

OMD[mon24]:~$ openssl version
OpenSSL 3.0.16 11 Feb 2025 (Library: OpenSSL 3.0.16 11 Feb 2025)

Can be anything done or should I wait for the upgrade of openssl libraries in checkmk?

2

which file (filename of rpm) did you use to install CheckMK?

3

Hi,

this was the rpm: check-mk-enterprise-2.4.0p17-el10-38.x86_64.rpm

4

This is the right one for RedHat 10. Question is, if there are any differences between Rocky Linux and RedHat. Shouldn’t be, but looks like it is.
For your reference: On my Ubuntu 22.04 installation it looks like this:

OMD[mon]:~$ php -v
PHP 8.1.2-1ubuntu2.22 (cli) (built: Jul 15 2025 12:11:22) (NTS)
Copyright (c) The PHP Group
Zend Engine v4.1.2, Copyright (c) Zend Technologies
with Zend OPcache v8.1.2-1ubuntu2.22, Copyright (c), by Zend Technologies

while openssl is this:

OMD[mon]:~$ openssl version
OpenSSL 3.0.16 11 Feb 2025 (Library: OpenSSL 3.0.16 11 Feb 2025)
5

Hi, I can confirm that patch 2.4.0p18 resolved the issue:

OMD[mon24]:~$ php -v
PHP 8.3.19 (cli) (built: Mar 12 2025 13:10:27) (NTS gcc x86_64)
Copyright (c) The PHP Group
Zend Engine v4.3.19, Copyright (c) Zend Technologies
with Zend OPcache v8.3.19, Copyright (c), by Zend Technologies

php and Nagvis work on Rocky Linux 10.1.

1 Like
6

Sorry for the inconvenience. Thanks for confirming that it works again in 2.4.0p18. This was the werk Werk #18937: Expanded System Command Wrappers for OpenSSL Compatibility