Symptom
When attempting to connect to a IOS-XE device through netconf port (default 830), you will receive the following error:
ssh_dispatch_run_fatal: Connection to port 830: error in libcrypto
Conditions
IOS-XE 16.X/17.1-2, affects all switches and routers running on the mentioned version.
Workaround
1. Delete self signed certificate off of IOS-XE device using:
show crypto pki trustpoints # and copy the TP-Selfsigned-... certificate
no crypto pki trustpoint TP-Selfsigned-x # where x is the above name
2. Regenerate the self signed certificate using the following document:
https://www.cisco.com/c/en/us/support/docs/security-vpn/public-key-infrastructure-pki/215118-ios-self-signed-certificate-expiration-o.html#anc9
Contact Cisco TAC only if the above workaround does not work, or if the issue comes back.
Further Problem Description