How to enable the legacy provider in openssl on RHEL9 ?

Solution Verified - Updated -

Issue

  • By default RHEL9 disables the legacy provider for security reasons. However operations which needs legacy algorithms/ciphers fails.

    # openssl pkcs12 -in file.p12 -info -noout 
    No output
    
  • How to enable support for legacy algorithms. Loading the legacy provider enables support for the following algorithms:

    Hashing Algorithms / Message Digests: MD2, MD4, MDC2, WHIRLPOOL, RIPEMD160
    Symmetric Ciphers: Blowfish, CAST, DES, IDEA, RC2, RC4,RC5, SEED
    Key Derivation Function (KDF): PBKDF1
    

Environment

  • Red Hat Enterprise Linux 9

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content