Re: OpenSSL: error:0308010C:digital envelope routines::unsupported while reading CRL
Gert Doering <[email protected]>
| Newsgroups | gmane.network.openvpn.user |
|---|---|
| Message-ID | <[email protected]> |
Hi,
On Mon, Nov 27, 2023 at 10:47:17AM +0100, Aleksandar Ivanisevic wrote:
> 2023-11-26T08:33:40.015885+01:00 xxx openvpn[7996]: xxx:6013 OpenSSL: error:0308010C:digital envelope routines::unsupported
So this sounds like "the CRL is built using old algorithms" (MD5?), and
it might work if you do "providers legacy default" in the server config.
> 2023-11-26T08:33:40.016558+01:00 xxx openvpn[7996]: xxx:6013 OpenSSL: error:0480006C:PEM routines::no start line
> 2023-11-26T08:33:40.017053+01:00 xxx openvpn[7996]: xxx:6013 CRL: cannot read CRL from file /config/vpn/my.crl
> 2023-11-26T08:33:40.017486+01:00 xxx openvpn[7996]: xxx:6013 CRL: loaded 1 CRLs from file /config/vpn/my.crl
Now *this* sounds like OpenVPN is lying, which would be a serious bug...
Can't test this right now (whether it's actually loading it by magic,
after OpenSSL told it "nah, this file is unsupported") or what is happening
there.
gert
--
"If was one thing all people took for granted, was conviction that if you
feed honest figures into a computer, honest figures come out. Never doubted
it myself till I met a computer with a sense of humor."
Robert A. Heinlein, The Moon is a Harsh Mistress
Gert Doering - Munich, Germany [email protected]
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc
(application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE----- iQGcBAEBAgAGBQJlZHQlAAoJEB2Cnv7KVigS60gMAJbLj+VoD95uJAIlTagOUwYi p9CmBaQ38ogguchztXFuELFDoy/odEca+RoX4GObpHj39mZaqFsdQuDrJexKo3xW VojWsY31CbKA9Ho1rLKJWd0YW+r1sVWu+oODrN+XibnCU8I5SiEfxZjbMtRnDZgn tKm11KijRMhb/oLv/0wd5rKfdSrd4trA/Q/fv3+GZDQU4SRUJlsHzPaC8rFAEuVZ Lc8lW90qIE/X2bOLKv1RtvmoaYiBjSpy3YmYBEFTjm6gzbiwHYtoQjET2pi8nYrB QACy5GpwEyX5slZ0WfXhU9xtq9mtVsMOU/Jiw3bhBTAVhHWqtv2JqzNo8yQVEvOC +YhMsUubiaqQOm8SL3fmGj80DrY5cvmcA3Zt4iW6rfrkpfLOKQ9BozDE++82/0Z9 JeFrdErOiTTw3ZGKRPebDxGOwv+hFZoKNHJ+VRTm0DGPL0UXdBOpwRBqY54KXShw Rnud7RQM1MclUEKEl8ZS2ISGEPEwIEF48WskkU/lOg== =+SMw -----END PGP SIGNATURE-----