Skip to content

OpenSSL 1.1 end-of-life in September 2023, breaks GDK installation on Linux

Overview

The openssl Ruby gem does not work with openssl 3.0. This breaks GDK as well as things like the instructions to update the handbook in all modern distributions.

OpenSSL 1.1 is end of life effective 28 September 2023, and ~all Linux distributions ship with 3.0+ since multiple years. The upstream bug has been open since 2020.

We (GitLab) recommend installing openssl 1.1 to unbreak: https://gitlab.com/gitlab-org/gitlab-development-kit/-/blob/main/doc/troubleshooting/ruby.md?plain=0#workaround-2-install-openssl-111 but this is neither an option nor a good idea now as it may compromise security.

Worse, it looks like we ship openssl 1.1?

Impacted categories

The following categories relate to this issue:

Steps to replicate (optional)

Proposal (optional)

Environment (optional)

  • Operating system name: <!-- output of `uname -a` command -->
  • Architecture: <!-- output of `arch` command -->
  • The contents of your gdk.yml (if any)
  • Ruby version: <!-- output of `ruby --version` command -->
  • GDK version: <!-- output of `git rev-parse --short HEAD` command -->
Edited by Andras Horvath