# OpenSSL configuration with legacy provider enabled
# Required for PHP 8.2+ with OpenSSL 3.0 to read older PFX certificates

openssl_conf = openssl_init

[openssl_init]
providers = provider_sect
alg_section = evp_asymkdf sect

[provider_sect]
legacy = legacy_sect
default = default_sect

[default_sect]
activate = 1

[legacy_sect]
activate = 1

[evp_asymkdf sect]
kdf = fipsany

# Aliases to maintain compatibility
[openssl_init]
# Additional legacy algorithms