Ubuntu 24.04 OpenSSL Security Level 2 Incompatibility with Atlas - SSL Alert 80

MongoDB Atlas connections fail on Ubuntu 24.04 LTS with error:
MongoServerSelectionError: error:0A000438:SSL
routines:ssl3_read_bytes:tlsv1 alert internal error (SSL alert number 80)

ROOT CAUSE: Ubuntu 24.04 OpenSSL compiled with hardcoded
DOPENSSL_TLS_SECURITY_LEVEL=2

AFFECTS: All mongosh and Node.js/Mongoose connections to Atlas from
Ubuntu 24.04

REPRODUCTION: Any Atlas connection from fresh Ubuntu 24.04 system

WORKAROUND: Install libssl1.1 compatibility package

TECHNICAL DETAILS:

  • Tested with mongosh 2.2.10, Node.js v18/v20
  • Network connectivity confirmed (ping/telnet work)
  • SSL works to other hosts (Google, MongoDB.com)
  • Issue persists across different networks
  • Ubuntu’s OpenSSL shows: DOPENSSL_TLS_SECURITY_LEVEL=2 in build flags

This affects all Ubuntu 24.04 users trying to connect to Atlas. Needs
coordination between MongoDB and Ubuntu teams.

15+ hours debugging time could be saved with better error messages or
documentation.

Mongosh is now at version 2.5.3 … I believe that Mongodb current db and tools all support SSLv3. Some web searching would have helped. As they say, “Hours of debugging will save you minutes of reading the documentation.” :grimacing:

3 Likes

I don’t believe this is an actual root cause or solution. I am running multiple Ubuntu 20.04 systems without any libss1.1. The only time I have been able to reproduce this is when the IP Access list does not include the IP I am connecting from and the target cluster is a free tier.

If you still consider this a problem I’d recommend opening an issue at jira.mongodb.com.

That made my Sunday.

1 Like