April 13, 2024
How to Fix Error 0308010C Digital Envelope Routines Unsupported

How to Fix Error 0308010C Digital Envelope Routines Unsupported

Posted January 23, 2024 at 3:39pm by iClarified
You may encounter an error:0308010C:digital envelope routines unsupported message when attempting to execute commands in newer versions of macOS.

Starting with OpenSSL 3.0, OpenSSL introduces some significant changes to its algorithms, moving the MD4 algorithms into OpenSSL 3.0's legacy provider. A provider in OpenSSL is a collection of algorithms that can be added to an application when required. The legacy provider contains algorithms that are considered outdated and less secure, and it does not load by default.

The simplest way to resolve this error is to modify your command to bring back support for legacy algorithms.


FIX ERROR 0308010C


Step One


In this example, we'll use the openssl pkcs12 command to parse a PKCS#12 file to a PEM file on macOS Sonoma running OpenSSL 3.1.4.

example:
openssl pkcs12 -in apns.p12 -out apns.pem -nodes

How to Fix Error 0308010C Digital Envelope Routines Unsupported

This throws the following error:

Error outputting keys and certificates
409CEAE301000000 :error:0308010C:digital envelope routines:inner_evp_generic_ fetch: unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()


How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Two


To resolve the error, you can bring back support for legacy algorithms in openssl using the -legacy option.

example:
openssl pkcs12 -in apns.p12 -out apns. pem -nodes -legacy

How to Fix Error 0308010C Digital Envelope Routines Unsupported

How to Fix Error 0308010C Digital Envelope Routines Unsupported


PERMANENT FIX


You can permanently have OpenSSL load legacy providers if required. Here's how.

Step One
Check to see which providers are loaded using the following command...

openssl list -providers

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Two
Find the directory in which your openssl configuration file is located...

openssl version -d

How to Fix Error 0308010C Digital Envelope Routines Unsupported

Step Three
Open the configuration file for editing, using the directory information found in the previous command. Enter your administrative password if prompted.

sudo nano /opt/homebrew/etc/openssl@3/openssl.cnf

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Four
Under the [provider_sect] add the following line:

legacy = legacy_sect

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Five
Under the [default_sect] uncomment the "activate = 1" line by removing the # symbol

[default_sect]
activate = 1

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Six
Below that, add the following the new section

[legacy_sect]
activate = 1

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Seven
Press Control+X to exit the file, then press Y to save your changes.

How to Fix Error 0308010C Digital Envelope Routines Unsupported

Hit Return to confirm the file name to write.

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Eight
You can now verify that legacy providers are loaded with the following command:

openssl list -providers

How to Fix Error 0308010C Digital Envelope Routines Unsupported


Step Nine
Finally, try your initial command again to verify that error:0308010C:digital envelope routines unsupported is gone.

How to Fix Error 0308010C Digital Envelope Routines Unsupported
Add Comment
Would you like to be notified when someone replies or adds a new comment?
Yes (All Threads)
Yes (This Thread Only)
No
iClarified Icon
Notifications
Would you like to be notified when we post a new Apple news article or tutorial?
Yes
No
Comments
You must login or register to add a comment...
Recent. Read the latest Apple News.
RECENT
Tutorials. Help is here.
TUTORIALS
Where to Download macOS Monterey
Where to Download macOS Ventura
AppleTV Firmware Download Locations
Where To Download iPad Firmware Files From
Where To Download iPhone Firmware Files From
Deals. Save on Apple devices and accessories.
DEALS