[Pkg-openssl-devel] Bug#843064: Bug#843064: openssl: incompatibility for enc command between openssl 1.1.0b-2 and previous 1.0.x versions

[Sebastian Andrzej Siewior]

On 2016-11-03 15:59:25 [+0100], Marek Lukaszuk wrote:
> passphrase I'm getting below error:
> 
>   > cat file_encrypted.dat | openssl enc -d -aes-256-cbc
>   enter aes-256-cbc decryption password:
>   bad decrypt
>   139814539760704:error:06065064:digital envelope
>   routines:EVP_DecryptFinal_ex:bad decrypt:crypto/evp/evp_enc.c:529:

bah. They changed the default digest from md5 to sha256 to create the
key. If you add '-md md5' to your 1.1. openssl then it will work. The
other way around you need '-md sha256' to keep 1.0 happy.

Let me see what upstream says…

Sebastian