How to Fix Error 0308010C Digital Envelope Routines Unsupported
LIKE
TWEET
SHARE
PIN
SHARE
POST
MAIL
MORE
Posted January 23, 2024 at 3:39pm by iClarified
You may encounter an error:0308010C:digital envelope routines unsupported message when attempting to execute commands in newer versions of macOS.
Starting with OpenSSL 3.0, OpenSSL introduces some significant changes to its algorithms, moving the MD4 algorithms into OpenSSL 3.0's legacy provider. A provider in OpenSSL is a collection of algorithms that can be added to an application when required. The legacy provider contains algorithms that are considered outdated and less secure, and it does not load by default.
The simplest way to resolve this error is to modify your command to bring back support for legacy algorithms.
FIX ERROR 0308010C
Step One
In this example, we'll use the openssl pkcs12 command to parse a PKCS#12 file to a PEM file on macOS Sonoma running OpenSSL 3.1.4.
You can permanently have OpenSSL load legacy providers if required. Here's how.
Step One Check to see which providers are loaded using the following command...
openssl list -providers
Step Two Find the directory in which your openssl configuration file is located...
openssl version -d
Step Three Open the configuration file for editing, using the directory information found in the previous command. Enter your administrative password if prompted.
sudo nano /opt/homebrew/etc/openssl@3/openssl.cnf
Step Four Under the [provider_sect] add the following line:
legacy = legacy_sect
Step Five Under the [default_sect] uncomment the "activate = 1" line by removing the # symbol
[default_sect] activate = 1
Step Six Below that, add the following the new section
[legacy_sect] activate = 1
Step Seven Press Control+X to exit the file, then press Y to save your changes.
Hit Return to confirm the file name to write.
Step Eight You can now verify that legacy providers are loaded with the following command:
openssl list -providers
Step Nine Finally, try your initial command again to verify that error:0308010C:digital envelope routines unsupported is gone.
Add Comment
Would you like to be notified when someone replies or adds a new comment?
Yes (All Threads)
Yes (This Thread Only)
No
Notifications
Would you like to be notified when we post a new Apple news article or tutorial?