Pritunl auto-update broke on Amazon Linux 2023 – OpenSSL 3.3 dependency mismatch

Pritunl Pritunl VPN
1

Hi,

I’m running Amazon Linux 2023 and after an automatic update this morning, Pritunl stopped working.

Environment

  • OS: Amazon Linux 2023

  • SELinux: Enforcing

  • Pritunl repo: Oracle EL9

  • Pritunl version installed during update: v1.32.4512.98

  • OpenSSL system version: 3.2.2

What happened
At ~05:01–05:02, an automatic dnf update ran and upgraded Pritunl. Immediately after, the Pritunl service failed to start.

Error
Pritunl fails due to a Python SSL import error:

ImportError: /lib64/libcrypto.so.3: version `OPENSSL_3.3.0' not found
(required by /usr/lib/pritunl/usr/lib/python3.9/lib-dynload/_ssl.cpython-39-x86_64-linux-gnu.so)

Rolling back the Pritunl update restores functionality.

Is the EL9 repository expected to be compatible with Amazon Linux 2023?
If not, is there a recommended repo or build for AL2023, or a plan to publish a compatible package?
Any other help would be great.

2

You need to use the correct repository RHEL 9 has a newer OpenSSL version then AmazonLinux 2023. The repositories documentation list all the repositories. Then run sudo dnf reinstall pritunl.

3

that did the trick, though I used update, reinstall was not working because of the repo difference.

btw Zach, do you have any helpful advice about selinux, once I’ve installed pritunl from amazon repo I started to have issue with selinux.