# Can't connect after upgrade to openssl-1.0.1e-30.el6.9

**URL:** <https://forums.percona.com/t/cant-connect-after-upgrade-to-openssl-1-0-1e-30-el6-9/4258>\
**Category:** Percona XtraDB Cluster 5.x\
**Created:** [June 10, 2015, 12:28pm UTC](https://forums.percona.com/t/cant-connect-after-upgrade-to-openssl-1-0-1e-30-el6-9/4258 "2015-06-10T12:28:10Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![beeble42](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/beeble42/32/1072_2.png) [@beeble42](https://forums.percona.com/u/beeble42)\
**Post date:** [June 10, 2015, 12:28pm UTC](https://forums.percona.com/t/cant-connect-after-upgrade-to-openssl-1-0-1e-30-el6-9/4258/1 "2015-06-10T12:28:10Z")

</div>

Hi All,

I upgraded one of our XtraDB Cluster nodes and a client system on CentOS to openssl-1.0.1e-30.el6.9 and can no longer connect to and mysql node from the cli client or php when using ssl. Even on the same host (connecting using 127.0.0.1) when requiring ssl on the user account. Galera replication works fine between the nodes though and it’s ssl encrypted.

This is the error from the mysql (percona) cli client:  
ERROR 2026 (HY000): SSL connection error: error:00000001:lib(0):func(0):reason(1)

Downgrade to the previous CentOS release of openssl (1.0.1e-30.el6.8) resolves the problem.

One change in this release of openssl that could be related is that the client will reject DH keys below 768 bits. Does anyone know the DH key size used in XtraDB Cluster?

We’re running

Thanks.

---

<div class="post-metadata">

**Author:** ![symx](https://avatars.discourse-cdn.com/v4/letter/s/91b2a8/32.png) [@symx](https://forums.percona.com/u/symx)\
**Post date:** [July 15, 2015, 7:09pm UTC](https://forums.percona.com/t/cant-connect-after-upgrade-to-openssl-1-0-1e-30-el6-9/4258/2 "2015-07-15T19:09:31Z")

</div>

I have the same problem on a debian system. I was using the latest percona-xtradb-cluster from percona repository. I even upgraded to debian 8 and the problem persisted. The standard mysql server 5.6.25 from [mysql.com](http://mysql.com) repository works just fine.