Open that openssl.cnf file in a text editor and make the following two modifications: Locate the [provider_sect] section and add legacy = legacy_sect: Ini, TOML [provider_sect] default = default_sect legacy = legacy_sect Scroll down to the [default_sect] section, ensure activate = 1 is uncommented, and add the [legacy_sect] block right below it: Ini, TOML [default_sect] activate = 1 [legacy_sect] activate = 1