https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272835

--- Comment #2 from Joerg Pulz <[email protected]> ---
There is an easier solution without changing the code at all.

Just modify /etc/ssl/openssl.cnf to make the specific section look like this:

#####
[provider_sect]
default = default_sect
legacy = legacy_sect

[default_sect]
activate = 1

[legacy_sect]
activate = 1
#####

This will (re)enable the default disabled legacy provider in OpenSSL 3.x.

One could argue to either make this default or at least add a hint in UPDATING.

-- 
You are receiving this mail because:
You are the assignee for the bug.

Reply via email to