Rudder

Hello, thanks for reporting.

Just to understand your problem: you used rudder technique 'SSH authorised keys' and I'm not sure I understand where the openssl directory changed from "/usr/lib/ssl" to "/opt/rudder/openssl" ?

Yes that was by deploying the default directive 'SSH authorised keys'. I added the SSH keys to be deployed and chose not to delete the existing ones.
I don't get by how mean it was done, but when I checked doing openssl version -d I got the following output 'OPENSSLDIR: "/opt/rudder/ssl"' instead of 'OPENSSLDIR: "/usr/lib/ssl"'

Do you have a /etc/ld.so.conf.d/rudder.conf file (or a /opt/rudder/lib line in /etc/ld.so.conf)?

If so it could explain the problem (it is probably a leftover from a previous Rudder version, it may happen when upgrade script failed, and is actually fixed in 6.0.3).

You can fix it by removing the configuration and running ldconfig:

if [ -f /etc/ld.so.conf.d/rudder.conf ]; then
  rm -f /etc/ld.so.conf.d/rudder.conf
  type ldconfig > /dev/null 2>&1 && ldconfig
fi
if [ -e /etc/ld.so.conf ] && grep -q "/opt/rudder/lib" /etc/ld.so.conf; then
  sed -i '/\/opt\/rudder\/lib/d' /etc/ld.so.conf
  type ldconfig > /dev/null 2>&1 && ldconfig
fi