Date: Sat, 9 Aug 2025 19:32:39 -0700 From: "Enji Cooper (yaneurabeya)" <yaneurabeya@gmail.com> To: Ian FREISLICH <ianfreislich@gmail.com> Cc: FreeBSD Current <current@freebsd.org>, Pierre Pronchery <khorben@defora.org> Subject: Re: OpenSSL legacy provider is broken Message-ID: <B43DA54A-0017-42CA-A1FE-15F28048FEF0@gmail.com> In-Reply-To: <b3f09f1b-e946-4bf1-822d-243dcd0dcd02@gmail.com>
index | next in thread | previous in thread | raw e-mail
[-- Attachment #1 --] > On Aug 9, 2025, at 7:08 AM, Ian FREISLICH <ianfreislich@gmail.com> wrote: > > Hi > > Previously this worked > > [brane] /usr/ports # openssl list -providers -provider legacy > Providers: > legacy > name: OpenSSL Legacy Provider > version: 3.0.16 > status: active > > Since the build last night, > > [router] /usr/ports/net/freeradius3 # openssl list -providers -provider legacy > list: unable to load provider legacy > Hint: use -provider-path option or OPENSSL_MODULES environment variable. > 10B045DBE7340000:error:12800067:DSO support routines:dlfcn_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_dlfcn.c:118:filename(/usr/lib/ossl-modules/legacy.so): /usr/lib/ossl-modules/legacy.so: Undefined symbol "ossl_kdf_pvk_functions" > 10B045DBE7340000:error:12800067:DSO support routines:DSO_load:could not load the shared library:/usr/src/crypto/openssl/crypto/dso/dso_lib.c:147: > 10B045DBE7340000:error:07880025:common libcrypto routines:provider_init:reason(37):/usr/src/crypto/openssl/crypto/provider_core.c:1019:name=legacy > > and freeradius doesn't start because of this: > > [router] /usr/ports/net/freeradius3 # radiusd -fX > FreeRADIUS Version 3.2.7 > ... > (TLS) Failed loading legacy provider > > I haven't yet figured out what part of my EAP configuration needs the legacy provider. It may be that EAP just needs a working legacy provider because it looks like the EAP module unconditionally attempts to load the provider and fails. [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkHfexGRJ3gYRdA2gGpE5DjPsNJgFAmiYBMcACgkQGpE5DjPs NJiWdw/8CzEECAAWtuQsVIpljtOdXQHouTcxd60lH+VURY+8M17FWue0whB5nou9 apa/nRM6q0RJl/7orawDnkoJb9u1R8HVOPIqt+rjppwNoNmZucbMb07SFnpCyZK5 Qpjco8AlGonfwADrLVDjq0Y/Nd1/77EtKMuv/0vEsQZvgCbRShbnGIH1z0YSGx+S 9kVXaNrcU87ACkkuxqw5SIKhSt1aMH1z6VBwDGjxXEc+YNkh/+OacRWZQbz4Nf8j T+5QhwOi+mNXWciZa1nrB50ehSjVOqQfNMfi4iCQlH+s+tUf5qdn8bHmT2bzEkBu KobCJXazkZtzJEg+Qp718XN1XWjVTFd5Gpe4KBFfUHT0GxTSw2JGpuAg7EeNMKxd RPnCOKXElHwNnNs7u1qWAePspUNIXcp+32dtd8qQLu0uWiL/gAeySpzqX8ivDEuM IaDRBLbUJ/sSSGGn+d74NC2U6Fhnsy8Op8cRAxhkGnWP2gULCmmCKeZ4wYN1OHx0 VHJYuhUgHagk4WDao3jOL2HEl8IKSf6rmepTi+J/Wz0RAAvS3M4RvY87S6p7J0ZI qNokr5T4wGzfHDXOV1s2WCyjAPRVDI6or0N2I5278n7RA13+hzn8oKGd9/RvjcAg Tl5uPD0SIcEFe88LAJPB30h2VGLWvuSRPuv/PATuqV5zErP/168= =XcO7 -----END PGP SIGNATURE-----home | help
Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?B43DA54A-0017-42CA-A1FE-15F28048FEF0>