"Error outputting keys and certificates" when adding APNS notifications to Amplify #12969

JoakimMellonn · 2023-07-19T13:12:09Z

How did you install the Amplify CLI?

npm

If applicable, what version of Node.js are you using?

v18.13.0

Amplify CLI Version

12.1.1

What operating system are you using?

Mac

Did you make any manual changes to the cloud resources managed by Amplify? Please describe the changes made.

No manual changes made

Describe the bug

In my Flutter project I'm trying to add notifications with APNS. When I do this I get the following error message after giving the path to the .p12 certificate and writing the non-existent password (just pressing enter):

Error outputting keys and certificates
00DEF7DD01000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
🛑 Command failed: openssl pkcs12 -in /Users/joakimrosenfeldtpedersen/Certificates.p12 -out /var/folders/cy/n2b5gjxj4dv1mztr65gpklgc0000gn/T/temp.pem -nodes -passin pass:
Error outputting keys and certificates
00DEF7DD01000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()


Resolution: Please report this issue at https://github.com/aws-amplify/amplify-cli/issues and include the project identifier from: 'amplify diagnose --send-report'
Learn more at: https://docs.amplify.aws/cli/project/troubleshooting/

Session Identifier: 72137838-7a44-4758-bd28-aa0766d0a711

✅ Report saved: /var/folders/cy/n2b5gjxj4dv1mztr65gpklgc0000gn/T/MellonnSpeakEU/report-1689771320910.zip

✔ Done

Project Identifier: 369c3e3e1f86cb7691bd7b7aef05de77

Expected behavior

Amplify notifications should be added to the project without any problems.

Reproduction steps

Create Flutter project and add Amplify to it.
Follow the official guide to add Notifications to said project.

Project Identifier

369c3e3e1f86cb7691bd7b7aef05de77

Log output

# Put your logs below this line
2023-07-19T12:53:29.435Z|info : amplify add notifications  
2023-07-19T12:53:29.533Z|info : @aws-amplify/amplify-cli-core.banner-message/index.ts.fetch banner messages from https://aws-amplify.github.io/amplify-cli/banner-message.json({}
2023-07-19T12:53:31.250Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileConfig(["MacBookPro2021Amplify"])
2023-07-19T12:53:31.252Z|info : amplify-provider-awscloudformation.system-config-manager.getProfiledAwsConfig.profileConfig([{"region":"eu-central-1"}])
2023-07-19T12:53:31.253Z|info : amplify-provider-awscloudformation.system-config-manager.getProfileCredentials(["MacBookPro2021Amplify"])
2023-07-19T12:55:23.323Z|error : Command failed: openssl pkcs12 -in /Users/joakimrosenfeldtpedersen/Certificates.p12 -out /var/folders/cy/n2b5gjxj4dv1mztr65gpklgc0000gn/T/temp.pem -nodes -passin pass:
Error outputting keys and certificates
00DEF7DD01000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()

UnknownFault: Command failed: openssl pkcs12 -in /Users/joakimrosenfeldtpedersen/Certificates.p12 -out /var/folders/cy/n2b5gjxj4dv1mztr65gpklgc0000gn/T/temp.pem -nodes -passin pass:
Error outputting keys and certificates
00DEF7DD01000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()

Additional information

No response

Before submitting, please confirm:

I have done my best to include a minimal, self-contained set of instructions for consistently reproducing the issue.
I have removed any sensitive information from my code snippets and submission.

The text was updated successfully, but these errors were encountered:

ykethan · 2023-07-19T16:16:07Z

Hey @JoakimMellonn, thank you for reaching. Could you let us know the openssl version currently installed by running openssl version.

Additionally, could you try directly running the openssl command in your terminal and let us know the output?
openssl pkcs12 -in /Users/joakimrosenfeldtpedersen/Certificates.p12 -out /var/folders/cy/n2b5gjxj4dv1mztr65gpklgc0000gn/T/temp.pem -nodes -passin <pass>.

Marking this as bug for error messaging improvements as I was able to reproduce a similar error message

🛑 Command failed: openssl pkcs12 -in /Users/abc/Downloads/cert.p12 -out /var/folders/7n/vtvskf9s3czf2429q2kv9yz00000gr/T/temp.pem -nodes -passin pass:
Mac verify error: invalid password?

JoakimMellonn · 2023-07-19T16:21:14Z

This is the output from openssl version: OpenSSL 3.1.1 30 May 2023.
Regarding running the openssl command, but I'm getting some errors regarding the -passin <pass> part of it. Should I replace anything or is this to be expected?

ykethan · 2023-07-19T16:35:01Z

@JoakimMellonnThe terminal should prompt you for a pass if we remove the -passin but we can simply press return without any input if the cert does not have a password assigned.

the output should be similar to as follows if the certificates are valid

openssl pkcs12 -in /Users/abc/Downloads/Certificates.p12 -out /var/folders/7n/vtvskf9s3czf2429q2kv9yz00000gr/T/temp.pem -nodes
Enter Import Password:
MAC verified OK

JoakimMellonn · 2023-07-19T16:37:07Z

Ah okay, I get the same error when doing it directly in the terminal.

Error outputting keys and certificates
00DEF7DD01000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:341:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()

ykethan · 2023-07-19T17:12:48Z

Hey @JoakimMellonn, thank you for the information. I was able to reproduce the issue using OpenSSL 3.1.1 30 May 2023.
When I switch to LibreSSL 3.3.6 the error does not occur.
This appears to be a issue with the SSL version, could try switching to LibreSSL 3.3.6 and let us know if the issue still occurs.

Making a note here for further investigation.
Working: LibreSSL 3.3.6
Not working: OpenSSL 3.1.1 30 May 2023

JoakimMellonn · 2023-07-19T17:22:53Z

Thank you, I've now tried switching to LibreSSL and can confirm it is working.

github-actions · 2023-07-19T17:23:12Z

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.

ykethan · 2023-07-19T17:32:36Z

@JoakimMellonn reopening the issue for tracking this behaviour and provide better error messaging.

kayzkenny · 2023-12-12T15:18:10Z

Still getting this error, when using the cli amplify add notifications

806024E901000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:342:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()
🛑 Command failed: openssl pkcs12 -in /Users/kehindeakeredolu/Desktop/freelance/light-app/carnet_light/assets/amplify.p12 -out /var/folders/n4/r1prvfbj5hs0m1hfkn9y2w180000gn/T/temp.pem -nodes -passin pass:
Error outputting keys and certificates
806024E901000000:error:0308010C:digital envelope routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:342:Global default library context, Algorithm (RC2-40-CBC : 0), Properties ()```

shree-ranga · 2024-01-01T13:49:09Z

openssl pkcs12 -in Certificates.p12 -out apns_cert.pem -legacy -nodes

Above worked

true-glassy · 2024-01-24T16:38:41Z

These are the steps to switch to libressl from openssl

brew install libressl
export PATH="/usr/local/opt/libressl/bin:$PATH" (you have to know where is your liberssl was downloaded and use that in your export)

The command to know where is your liberssl was is brew --prefix libressl

richstimson · 2024-11-17T19:44:52Z

These are the steps to switch to libressl from openssl

brew install libressl

export PATH="/usr/local/opt/libressl/bin:$PATH" (you have to know where is your liberssl was downloaded and use that in your export)

The command to know where is your liberssl was is brew --prefix libressl

Note: true-glassy's answer resolves the issue for amplify add notifications (or amplify update notifications).

JoakimMellonn added the pending-triage Issue is pending triage label Jul 19, 2023

ykethan added the notifications Issues tied to the notifications category label Jul 19, 2023

ykethan added bug Something isn't working and removed pending-triage Issue is pending triage labels Jul 19, 2023

JoakimMellonn closed this as completed Jul 19, 2023

ykethan reopened this Jul 19, 2023

josefaidt added the p3 label Jul 19, 2023

salihgueler mentioned this issue Aug 28, 2023

fix(push-notifications): Updated cross platform setup aws-amplify/docs#5806

Merged

11 tasks

cybex-dev mentioned this issue Oct 1, 2023

Error outputting keys and certificates cybex-dev/twilio_voice#178

Closed

larsoner mentioned this issue Nov 21, 2023

FIX: Name mne-tools/mne-installers#230

Merged

ykethan mentioned this issue Dec 13, 2023

Error outputting keys and certificates" when adding APNS notifications to Amplify #13474

Closed

2 tasks

ykethan mentioned this issue Jan 10, 2024

Amplify Pull Notification: MAC verified OK But 🛑 Failed to enable the APNS channel. #13517

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

"Error outputting keys and certificates" when adding APNS notifications to Amplify #12969

"Error outputting keys and certificates" when adding APNS notifications to Amplify #12969

JoakimMellonn commented Jul 19, 2023

ykethan commented Jul 19, 2023 •

edited

Loading

JoakimMellonn commented Jul 19, 2023

ykethan commented Jul 19, 2023 •

edited

Loading

JoakimMellonn commented Jul 19, 2023

ykethan commented Jul 19, 2023

JoakimMellonn commented Jul 19, 2023

github-actions bot commented Jul 19, 2023

ykethan commented Jul 19, 2023

kayzkenny commented Dec 12, 2023 •

edited

Loading

shree-ranga commented Jan 1, 2024

true-glassy commented Jan 24, 2024 •

edited

Loading

richstimson commented Nov 17, 2024

"Error outputting keys and certificates" when adding APNS notifications to Amplify #12969

"Error outputting keys and certificates" when adding APNS notifications to Amplify #12969

Comments

JoakimMellonn commented Jul 19, 2023

How did you install the Amplify CLI?

If applicable, what version of Node.js are you using?

Amplify CLI Version

What operating system are you using?

Did you make any manual changes to the cloud resources managed by Amplify? Please describe the changes made.

Describe the bug

Expected behavior

Reproduction steps

Project Identifier

Log output

Additional information

Before submitting, please confirm:

ykethan commented Jul 19, 2023 • edited Loading

JoakimMellonn commented Jul 19, 2023

ykethan commented Jul 19, 2023 • edited Loading

JoakimMellonn commented Jul 19, 2023

ykethan commented Jul 19, 2023

JoakimMellonn commented Jul 19, 2023

github-actions bot commented Jul 19, 2023

⚠️COMMENT VISIBILITY WARNING⚠️

ykethan commented Jul 19, 2023

kayzkenny commented Dec 12, 2023 • edited Loading

shree-ranga commented Jan 1, 2024

true-glassy commented Jan 24, 2024 • edited Loading

richstimson commented Nov 17, 2024

ykethan commented Jul 19, 2023 •

edited

Loading

ykethan commented Jul 19, 2023 •

edited

Loading

kayzkenny commented Dec 12, 2023 •

edited

Loading

true-glassy commented Jan 24, 2024 •

edited

Loading