Comment 0 for bug 1957166

Revision history for this message
Simon Chopin (schopin) wrote :

The package fails to build, the test run fails.

The issue comes from the xmltoolingtest/data/test.pfx certificate that contains data encrypted using RC2, which is disabled by default in OpenSSL 3.0. It could be re-enabled using the legacy provider, but I'd rather upgrade the certificate to use a supported algorithm.

Converting the algorithm can be done via these simple steps (using an intermediary file because piping doesn't seem to work...)

openssl pkcs12 -provider default -provider legacy -in xmltoolingtest/data/test.pfx -passin pass:password -out cert.pem -nodes
openssl pkcs12 -export -out xmltoolingtest/data/test.pfx -passout pass:password -in cert.pem
rm cert.pem

(note that if using OpenSSL 3.0 you'll need to add `-provider default -provider legacy` to the first command in order to decode the original file)