Hello!
There are a lot of errors regarding legacy cipher while restoring engine backup to RL9
during our migration to 4.5.
2025-04-22 08:35:48,773+0300 DEBUG otopi.plugins.ovirt_engine_setup.ovirt_engine.pki.ca
plugin.execute:923 execute-output: ('/usr/bin/openssl', 'pkcs12',
'-in', '/etc/pki/ovirt-engine/keys/engine.p12', '-passin',
'pass:**FILTERED**', '-nokeys') stderr:
Error outputting keys and certificates
00CE347D1F7F0000:error:0308010C:digital envelope
routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:355:Global default
library context, Algorithm (RC2-40-CBC : 0), Properties ()
RHEL/RL 9 disables the legacy provider for security reasons.
What is the best way to solve this problem ?
Should i just enable legacy provider in OpenSSL config or re-sign all certs with new ciper
(where can i find more information about this) ?
Thank you.