[Bug 272835] kinit(8) segmentation fault with openssl-3.0 in CURRENT

https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=272835

--- Comment #2 from Joerg Pulz <Joerg.Pulz@frm2.tum.de> ---
There is an easier solution without changing the code at all.

Just modify /etc/ssl/openssl.cnf to make the specific section look like this:

#####
[provider_sect]
default = default_sect
legacy = legacy_sect

[default_sect]
activate = 1

[legacy_sect]
activate = 1
#####

This will (re)enable the default disabled legacy provider in OpenSSL 3.x.

One could argue to either make this default or at least add a hint in UPDATING.

-- 
You are receiving this mail because:
You are the assignee for the bug.