Amazon Linux 2023 Update (OpenSSL 3.2) causing OpenSSL.jl / HTTP.jl failures

Hi everyone,

I wanted to document a breaking issue that recently started appearing on AWS environments (specifically Amazon Linux 2023) as of mid-November 2025, in case anyone else is hitting a wall with their production builds.

The Symptom

If you are running Julia on AWS (EC2, Lambda, or Docker containers based on amazonlinux:2023), you might suddenly see HTTP.jl or OpenSSL.jl failing during precompilation or initialization with an error like this:

JuliaERROR: LoadError: AssertionError: ret == 1 Stacktrace: [1] OpenSSL.SSLContext(ssl_method::OpenSSL.SSLMethod, verify_file::String) @ OpenSSL .../src/ssl.jl:165

This seems to happen even if your Manifest.toml hasn’t changed.

The Cause

Amazon recently rolled out the AL2023.9 release (Nov 2025), which updates the system OpenSSL version from 3.0 to 3.2.2 and enforces stricter FIPS provider management.

When OpenSSL_jll artifact (used by HTTP.jl) tries to initialize on the new AL2023 kernel, it conflicts with the system’s FIPS configuration, causing the context initialization to return 0 (failure) instead of 1 (success).

Fixes

Not sure how to best fix this I only saw about ways on finding a way to use the openssl of AWS directly but would be nice if this could maybe be handled by OpenSSL.jl

For now I am fortunate to be able to drop a dependency to avoid this but I guess others will run into this so just wanted to open up a topic for this.

Related issue

7 Likes

I’ve added the results of some investigations and a reproducer into the linked issue: OpenSSL v1.6.0 associated with bug with remote VSCode sessions · Issue #54 · JuliaWeb/OpenSSL.jl · GitHub

2 Likes

This is not just an Amazon issue. I am getting the same issue using Remote SSH on vscode to log in into an Ubuntu 24 server.

Thanks for having a look into it. Just to double check the issue with vscode and AWS are the same, right? And 1.12 should work on AWS then as well?

OK, so this should now be fixed in OpenSSL.jl v1.6.1. Please let me know if this doesn’t fix things for you.

Ref: Fix error when passing a CA cert directory by aviks · Pull Request #57 · JuliaWeb/OpenSSL.jl · GitHub

I believe so, but I haven’t reproduced this on Amazon Linux myself. Please try out the new version and see what happens.

Regards

Avik