Google Drive backup no longer functional in 24.1

[bucker00]

The bug:
Google Drive backups are no longer working after upgrade to 24.1. It previously worked daily up until yesterday on version 23.7.12.
The setup configuration is still in place but attempting a backup produces the message "Invalid P12 key, openssl_pkcs12_read() failed".
Configuring a new valid p12 file and supplying that in the configuration instead also produces the same message.

To Reproduce

Steps to reproduce the behavior:

1. Go to ~/diag_backup.php and then the Google Drive section on that page.
2. Set up Google Drive backups as per https://docs.opnsense.org/manual/how-tos/cloud_backup.html
3. When the configuration is complete upload the p12 file using the Browse button.
4. Click the 'Setup/Test Google Drive' button.
5. The following error is displayed:
   "The following input errors were detected:
   Invalid P12 key, openssl_pkcs12_read() failed
   Saved settings, but remote backup failed."

Expected behavior
Usually and up until today, a backup is saved to the configured Google Drive and a list of the backups currently stored there already is displayed.

Alternatives:
Manual backups seem to be the only option currently without finding and installing plugins.

Software version used and hardware type:
OPNsense 24.1-amd64
CPU type | 12th Gen Intel(R) Core(TM) i3-1215U (6 cores, 8 threads)

[bucker00]

I should also have mentioned that this has also been encountered by several other users in the 24.1 thread in the forums.

[fichtner]

Could be an incompatibility with OpenSSL 3. Will pick this up soon.

[AdSchellevis]

In order to read the legacy pkcs12 files, legacy mode need to be enabled in /usr/local/openssl/openssl.cnf offering support for MD4. If someone wants to test this commit, you may also copy the supplied openssl.cnf file to /usr/local/openssl/openssl.cnf and restart the webserver (using configctl webgui restart)

/usr/local/bin/openssl list -providers will list the providers available and should look like this:

Providers:
  default
    name: OpenSSL Default Provider
    version: 3.0.12
    status: active
  legacy
    name: OpenSSL Legacy Provider
    version: 3.0.12
    status: active