I am not sure what you mean. I try to be more direct. I use to import certificates that identify me in browswers, mainly Firefox and Google-chrome. In my case, there are pk12 certificates issued by Spanish administration. I have used them in several versions of Fedora with no issue. Recently I made a fresh installation of Fedora 40 and I was not able to import them in the browsers. They complain the certificates were wrong. These certificates serve to sign pdf documents, e.g. using okular. I tried to signed some documents and it worked, so the certificates were not wrong. Playing with openssl there was an indication about some problem with c2-40-cbc and I decided to post it here. Jonathan Billings replied that maybe the issue was with crypto policy. Following his advice I saw that the output update-crypto-policy --show was DEFAULT in my fresh installation and LEGACY in another computer. After applying update-crypto-policy --set LEGACY, everything works. I hope it is more clear and if something is not I would appreciate also to know what exactly. Enrique. -- _______________________________________________ users mailing list -- users@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to users-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@xxxxxxxxxxxxxxxxxxxxxxx Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue