Error: Unsupported Algorithm When Extracting Public Certificate from PKCS#12 File

[tangzhiqiangh]

Problem Description:
When running the following command:

openssl pkcs12 -in testit.aggsimida.com-Entire_certificate-030332.p12 -clcerts -nokeys -out public.crt
I encountered the following error:

Enter Import Password:
Error outputting keys and certificates
801B5126747F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:349:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()

Version Information:
OpenSSL Version: OpenSSL 3.0.2 15 Mar 2022 (Library: OpenSSL 3.0.2 15 Mar 2022)
Operating System: Ubuntu 22.04

Steps to Reproduce:
Run the above OpenSSL command.
Enter the import password when prompted.

Expected Behavior:
Expecting to successfully extract the public certificate without encountering errors.

Actual Behavior:
Encountered an error related to the unsupported algorithm.

[nhorman]

Can you post the output of the following command please:

./configdata.pm --dump

I suspect that your openssl build doesn't have the rc2 algorithm included in your configuration

[tangzhiqiangh]

Please run this command in which directory. I am using openssl in the Ubuntu software package.

[mattcaswell]

801B5126747F0000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:../crypto/evp/evp_fetch.c:349:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()

This tells you that the file has been encrypted with an unsupported encryption algorithm (RC2-40-CBC). That algorithm is now considered legacy and insecure. The algorithm is still available in our legacy provider. Please try adding "-legacy" to your command line.

[boniface1994]

thanks you very match

[saviour123]

With -legacy flag. This worked for me as mentioned.

$ openssl pkcs12 -in fileWith.p12 -out Output.pem -nodes -nocerts -legacy