IBM i Global

IBM i 

A space for professionals working with IBM’s integrated OS for Power systems to exchange ideas, ask questions, and share expertise on topics like RPG and COBOL development, application modernization, open source integration, system administration, and business continuity.


#Power


#IBMi
#Power
#Operatingsystems
#Servers
 View Only
Back to discussions
Expand all | Collapse all

Warning: The current OSS versions of OpenSSL and OpenSSH are not compatible!

  • 1.  Warning: The current OSS versions of OpenSSL and OpenSSH are not compatible!

    Posted 09/08/26 07:10 AM

    First, OpenSSL and OpenSSH from 5733-SC1 are not affected and still works. These are updated using PTF's and have not been affected in any way.

    However, the latest yum update to OpenSSL 3.5.8 25 Aug 2026 broke the OpenSSH package in /QOpenSys/pkgs/bin. Now, every SSH operation like ssh or scp will return the following error message: "OpenSSL version mismatch. Built against 300000c0, you have 30500080"

    You can circumvent this by replacing the OpenSSH commands (e.g. ssh, scp and sftp) in /QOpenSys/bin/pkgs with soft links to the commands in /QOpenSys/usr/bin, which is the 'native' version of OpenSSH from 5733-SC1.

    We wait for IBM to release an update to the OpenSSH package making it compatible with the newer OpenSSL package. I will update this post when we have the new version of OpenSSH.



    ------------------------------
    Christian Jorgensen
    IT System Administrator | CEAC member
    Network of Music Partners A/S
    ------------------------------


  • 2.  RE: Warning: The current OSS versions of OpenSSL and OpenSSH are not compatible!

    Posted 09/11/26 03:25 AM
    Edited by Christian Jorgensen 09/11/26 03:27 AM

    IBM has now provided a new version of the OpenSSH package, version 8.1p1-3, fixing the incompatibility issue with OpenSSL.

    The new version reports like this:

    > ssh -V
OpenSSH_8.1p1, OpenSSL 3.5.8 25 Aug 2026

    If you had circumvent the issue with symbolic links for the ssh and scp commands, no further action is necessary: Your links will be replaced with the OpenSSH commands from IBM.



    ------------------------------
    Christian Jorgensen
    IT System Administrator | CEAC member
    Network of Music Partners A/S
    ------------------------------