Werk #19581: Wrap rpm and journalctl to also use the system OpenSSL
| Component | Linux distributions | ||||||
| Title | Wrap rpm and journalctl to also use the system OpenSSL | ||||||
| Date | Jul 27, 2026 | ||||||
| Level | Trivial Change | ||||||
| Class | Bug Fix | ||||||
| Compatibility | Incompatible - Manual interaction might be required | ||||||
| Checkmk versions & editions |
|
Werks #18935 and #18937 introduced wrappers for several system commands (curl, dig, host, nc, nmap, nslookup, pdftoppm, php, php-cgi, resolvectl, rpmbuild, scp, ssh, systemctl, zypper) to work around an OpenSSL incompatibility between Checkmk's bundled libraries and the system's OpenSSL on some Linux distributions.
We've now extended this to also wrap rpm and journalctl, which could otherwise fail with an error like:
rpm: /omd/sites/<site>/lib/libcrypto.so.3: version 'OPENSSL_3.4.0' not found (required by ...)
on the following operating systems:
- SLES 15 SP5, 15 SP6, 15 SP7
- RHEL 9, 10
- Debian 13
As with the other wrapped commands, this fix only takes effect when rpm/journalctl are called by their short name (relying on the site's PATH), not via an absolute path. See Werk #18937 for more background and workarounds.