Throws SSL error while installing fluent-gem in rocky9 linux.

[anupg336]

What is a problem?

Encountering below error while installing fluent-gem in rocky9 linux.

+ buildah run --isolation chroot rocky9-nano-working-container -- fluent-gem install --no-document --source https://repo.cci.anup.net/artifactory/rubygems fluent-plugin-multi-format-parser -v 1.1.0 --backtrace --debug -V
NOTE:  Debugging mode prints all exceptions even when rescued
ERROR:  SSL verification error at depth 0: EE certificate key too weak (66)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/protocol.rb:46 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/http.rb:1691 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/request.rb:133 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/)
Exception `Errno::ENOENT' at /opt/fluent/lib/ruby/3.2.0/rubygems/remote_fetcher.rb:284 - No such file or directory @ rb_file_s_stat - /root/.local/share/gem/specs/repo.cci.anup.net%443/artifactory/rubygems/prerelease_specs.4.8
ERROR:  SSL verification error at depth 0: EE certificate key too weak (66)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/protocol.rb:46 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/http.rb:1691 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/request.rb:133 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/prerelease_specs.4.8.gz)
Exception `Errno::ENOENT' at /opt/fluent/lib/ruby/3.2.0/rubygems/remote_fetcher.rb:284 - No such file or directory @ rb_file_s_stat - /root/.local/share/gem/specs/repo.cci.anup.net%443/artifactory/rubygems/specs.4.8
ERROR:  SSL verification error at depth 0: EE certificate key too weak (66)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/protocol.rb:46 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/http.rb:1691 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/request.rb:133 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/specs.4.8.gz)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/spec_fetcher.rb:259 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/specs.4.8.gz)
Exception `Gem::UnsatisfiableDependencyError' at /opt/fluent/lib/ruby/3.2.0/rubygems/resolver/installer_set.rb:83 - Unable to resolve dependency: user requested 'fluent-plugin-multi-format-parser (= 1.1.0)'
ERROR:  Could not find a valid gem 'fluent-plugin-multi-format-parser' (= 1.1.0), here is why:
          Unable to download data from https://repo.cci.anup.net/artifactory/rubygems/ - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/specs.4.8.gz)
Exception `Errno::ENOENT' at /opt/fluent/lib/ruby/3.2.0/rubygems/remote_fetcher.rb:284 - No such file or directory @ rb_file_s_stat - /root/.local/share/gem/specs/repo.cci.anup.net%443/artifactory/rubygems/latest_specs.4.8
ERROR:  SSL verification error at depth 0: EE certificate key too weak (66)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/protocol.rb:46 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/http.rb:1691 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/request.rb:133 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/latest_specs.4.8.gz)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/spec_fetcher.rb:259 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/latest_specs.4.8.gz)
Exception `Errno::ENOENT' at /opt/fluent/lib/ruby/3.2.0/rubygems/remote_fetcher.rb:284 - No such file or directory @ rb_file_s_stat - /root/.local/share/gem/specs/repo.cci.anup.net%443/artifactory/rubygems/prerelease_specs.4.8
ERROR:  SSL verification error at depth 0: EE certificate key too weak (66)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/protocol.rb:46 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `OpenSSL::SSL::SSLError' at /opt/fluent/lib/ruby/3.2.0/net/http.rb:1691 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/request.rb:133 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/prerelease_specs.4.8.gz)
Exception `Gem::RemoteFetcher::FetchError' at /opt/fluent/lib/ruby/3.2.0/rubygems/spec_fetcher.rb:259 - SSL_connect returned=1 errno=0 peeraddr=10.176.153.17:443 state=error: certificate verify failed (EE certificate key too weak) (https://repo.cci.anup.net/artifactory/rubygems/prerelease_specs.4.8.gz)
subprocess exited with status 2
subprocess exited with status 2
Error: exit status 2
make[1]: *** [Makefile:9: build] Error 2
make[1]: Leaving directory '/home/jenkins/workspace/CTO/ABC/Analytics/ABC-XYZ-DOCKER_CI/docker/xyz-fluentd'
make: *** [Makefile:7: build] Error 1

Describe the configuration of Fluentd

No response

Describe the logs of Fluentd

No response

Environment

- Fluentd version: 1.16.3
- TD Agent version:
- Fluent Package version: fluent-package-5.0.3-1.el9.x86_64.rpm
- Docker image (tag):
- Operating system: rocky9-linux
- Kernel version:

[daipom]

I am not familiar with this, but it looks like an environmental issue.
Could you please check this guide and investigate the cause?

• https://guides.rubygems.org/ssl-certificate-update/