nodejs 17: digital envelope routines::unsupported #14532

akornatskyy · 2021-10-19T18:33:58Z

Bug report

What is the current behavior?

[webpack-cli] Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:67:19)
    at Object.createHash (node:crypto:130:10)
    at BulkUpdateDecorator.hashFactory (/opt/src/node_modules/webpack/lib/util/createHash.js:155:18)
    at BulkUpdateDecorator.digest (/opt/src/node_modules/webpack/lib/util/createHash.js:80:21)
    at /opt/src/node_modules/webpack/lib/DefinePlugin.js:595:38
    at Hook.eval [as call] (eval at create (/opt/src/node_modules/tapable/lib/HookCodeFactory.js:19:10), <anonymous>:100:1)
    at Hook.CALL_DELEGATE [as _call] (/opt/src/node_modules/tapable/lib/Hook.js:14:14)
    at Compiler.newCompilation (/opt/src/node_modules/webpack/lib/Compiler.js:1053:26)
    at /opt/src/node_modules/webpack/lib/Compiler.js:1097:29
    at Hook.eval [as callAsync] (eval at create (/opt/src/node_modules/tapable/lib/HookCodeFactory.js:33:10), <anonymous>:6:1) {
  opensslErrorStack: [ 'error:03000086:digital envelope routines::initialization error' ],
  library: 'digital envelope routines',
  reason: 'unsupported',
  code: 'ERR_OSSL_EVP_UNSUPPORTED'
}

Other relevant information:
webpack version: 5.59.0
Node.js version: 17.0.0
Operating System: linux x64

alexander-akait · 2021-10-19T18:40:28Z

~~Why do you ignore reproducible repo? What is output.hashFunction/output.hashDigest and etc?~~ I see...

alexander-akait · 2021-10-19T18:43:50Z

nodejs/node#40455

akornatskyy · 2021-10-19T18:50:52Z

workaround:

export NODE_OPTIONS=--openssl-legacy-provider

zloirock · 2021-10-19T22:55:23Z

The same situation is also with webpack@4. I hope that it will be fixed in the legacy versions too since I'm blocked to use the actual webpack versions in legacy projects due to the requirement of the support of old NodeJS versions.

alexander-akait · 2021-10-20T08:36:13Z

Yes, marked as critical

sokra · 2021-10-20T09:57:43Z

The same situation is also with webpack@4. I hope that it will be fixed in the legacy versions too since I'm blocked to use the actual webpack versions in legacy projects due to the requirement of the support of old NodeJS versions.

We will not update that in webpack 4.

alexander-akait · 2021-10-20T10:00:46Z

For webpack 4 solutions:

export NODE_OPTIONS=--openssl-legacy-provider
monkey patching crypto for md4 and Node.js v17

sokra · 2021-10-20T10:13:25Z

hmm... We can't really automatically fallback to a different hashing algorithm, since this would break the determinism of builds (builds should be equal independent of node.js version).

We are planning to migrate to a different hash function anyway for webpack 6. So currently you will have to use output.hashFunction: "xxhash64" in configuration to fix that. Or --openssl-legacy-provider

Seems like the need to release a new major becomes more pressing...

…` + NodeJS 17 issue webpack/webpack#14532

alexander-akait · 2021-10-20T15:32:25Z

To be honestly it is very strange from Node.js developers, no deprecation messages, they just remove it... and break a lot of packages

MaxGraey · 2021-10-20T15:56:44Z

To be honestly it is very strange from Node.js developers, no deprecation messages, they just remove it... and break a lot of packages

node.js 17 uses OpenSSL3 which have changed code for initialization context of md family (including md4):
https://wiki.openssl.org/index.php/OpenSSL_3.0#Upgrading_to_OpenSSL_3.0_from_OpenSSL_1.0.2

But I agree that node.js could have warned you in advance, given that you are one of the biggest consumers.

FSM1 · 2021-10-22T10:32:43Z

workaround:

export NODE_OPTIONS=--openssl-legacy-provider

where should this be added?

akornatskyy · 2021-10-22T10:34:41Z

@FSM1 : if you use bash or related just execute that before you work with webpack.

krisnaRusdiono · 2024-05-27T04:05:53Z

In my experience, this issue is occur when i tried to serve angular app (mine is v11.0.0) with node 18.19.1.
I might suggest people who try

export NODE_OPTIONS=--openssl-legacy-provider (macOS)
or
set NODE_OPTIONS=--openssl-legacy-provider (windows)

and still failing, try to switch your node version to 16.XX.X (mine is 16.20.2). Switching node version is always work for me to resolve this issue (i run many version of multi project with different angular version).
(use nvm) for managing your node version is recommended!

Sinc63 · 2024-08-19T14:57:56Z

The same situation is also with webpack@4. I hope that it will be fixed in the legacy versions too since I'm blocked to use the actual webpack versions in legacy projects due to the requirement of the support of old NodeJS versions.

We will not update that in webpack 4.

It appears that a "fix" for this HAS been applied to webpack@4. #17628 changed the code so that effectively calls to crypto.createHash("md4") circumvent the crypto package that generates the error, and directly call underlying functions that implement md4. Switch to [email protected] to see the result.

martinellison · 2024-08-31T03:17:21Z

I'm still getting this error, so why is it closed? I have just followed the tutorial in https://rustwasm.github.io/docs/book/game-of-life/hello-world.html (I used cargo install wasm-pack) and I got this error when I ran npm run start. Should I be using a development version from github?

edit: OK, the NODE_OPTIONS fix works for me

See webpack/webpack#14532

Ohiekkar · 2024-09-27T11:57:18Z

Dropping a comment here just in case someone else still runs into similar issues.

We were suddenly getting these errors on Node.js 16.20.2 and Webpack 4.47.0 after switching OS from Centos 7 to Rocky Linux 9. Turns out that the Node 16.20.2 available in the Rocky Linux 9 repo includes backports to the SSL vulnerability fixes that cause these errors in the first place.

The fix that was made into Webpack to make it work with Node >=18 explicitly check that the running node version is 18 or higher, thus it wont work with the patched Node v16 that Rocky Linux provides.

Our fix was simply to update to Node >=18.

…eb-angular` ### What is this PR for? Specify the Node.js engine version below 17 in the `zeppelin-web-angular` package.json file to avoid errors related to Node.js 17+ and OpenSSL in Webpack. If we upgrade the Angular version to 13+ in the future, we will be able to use Node.js 17+ as well. [Reference: nodejs 17: digital envelope routines::unsupported · Issue #14532 · webpack/webpack](webpack/webpack#14532) ### What type of PR is it? Improvement ### Todos ### What is the Jira issue? * [ZEPPELIN-6110] ### How should this be tested? 1. Set your Node.js version to 17+ 2. Execute `npm run postinstall` in `zeppelin-web-angular` ### Screenshots (if appropriate) ### Questions: * Does the license files need to update? N * Is there breaking changes for older versions? N * Does this needs documentation? N Closes #4848 from seung-00/ZEPPELIN-6110. Signed-off-by: Cheng Pan <[email protected]>

…eb-angular` ### What is this PR for? Specify the Node.js engine version below 17 in the `zeppelin-web-angular` package.json file to avoid errors related to Node.js 17+ and OpenSSL in Webpack. If we upgrade the Angular version to 13+ in the future, we will be able to use Node.js 17+ as well. [Reference: nodejs 17: digital envelope routines::unsupported · Issue #14532 · webpack/webpack](webpack/webpack#14532) ### What type of PR is it? Improvement ### Todos ### What is the Jira issue? * [ZEPPELIN-6110] ### How should this be tested? 1. Set your Node.js version to 17+ 2. Execute `npm run postinstall` in `zeppelin-web-angular` ### Screenshots (if appropriate) ### Questions: * Does the license files need to update? N * Is there breaking changes for older versions? N * Does this needs documentation? N Closes #4848 from seung-00/ZEPPELIN-6110. Signed-off-by: Cheng Pan <[email protected]> (cherry picked from commit 17e1e73) Signed-off-by: Cheng Pan <[email protected]>

Wissaladd · 2024-11-10T12:48:54Z

In my case I just wanted to fix this problem for a specific project since my other projects rely on Node17 and i cannot downgrade
my packageJson has "dev": " webpack-dev-server --watch --config webpack.config.dev.js", since my problem was while using yarn dev so i replaced it with this "dev": "NODE_OPTIONS=--openssl-legacy-provider webpack-dev-server --watch --config webpack.config.dev.js",
I have Node18 and yarn4 if you're wondering

devsheva · 2024-11-16T17:37:52Z

the NODE_OPTIONS works for me, but without it i keep getting the problem even if with Node22

webpack/webpack#14532

Reference: webpack/webpack#14532 (comment)

When using latest node, webpack produces an error, Error: error:0308010C:digital envelope routines::unsupported webpack/webpack#14532 This is due to the webpack version being 5.53.0 when running npm install. The error is fixed in 5.61.0 by the following merged pull request, webpack/webpack#14584 https://github.com/webpack/webpack/releases/tag/v5.61.0 When I set 5.61.0 as the minimum I now get 5.72.0 version which is latest. Build completes without error.

pvspain · 2025-02-25T08:37:15Z

the NODE_OPTIONS works for me, but without it i keep getting the problem even if with Node22

NODE_OPTIONS does NOT work for me...

node 22.14.0 (LTS)

"start": "set NODE_OPTIONS=--openssl-legacy-provider && react-scripts start",
"build": "set NODE_OPTIONS=--openssl-legacy-provider && react-scripts build",

Please reopen this ticket

LoganTann · 2025-03-11T09:50:50Z

I can confirm the issue now reappears in node 22.

EthanDarling8 · 2025-03-12T15:56:12Z

Also reappeared for me using node 22.14.0

patiltukaram · 2025-04-09T18:40:48Z

Also reappeared for me using node 22.14.0

alexander-akait · 2025-04-09T19:15:38Z

We don't use md4 built-in hashes in webpack@5, check your webpack version and look at trace this error

webpack-bot added webpack-5 question labels Oct 19, 2021

alexander-akait added critical-bug and removed question labels Oct 19, 2021

rexxars mentioned this issue Oct 19, 2021

sanity start failed to compile sanity-io/sanity#2880

Closed

foxscotch mentioned this issue Oct 20, 2021

Node.js v17.0.0 - Error starting project in development mode vercel/next.js#30078

Closed

JoostK mentioned this issue Oct 20, 2021

angular router compile error 'ERR_OSSL_EVP_UNSUPPORTED' angular/angular-cli#21980

Closed

alexander-akait added the webpack-4 label Oct 20, 2021

alexander-akait mentioned this issue Oct 20, 2021

Node 17: Some unsupported OpenSSL3 error during internal crypto hashing webpack/webpack-cli#3012

Closed

alexander-akait pinned this issue Oct 20, 2021

alexander-akait mentioned this issue Oct 20, 2021

Error: error:0308010C:digital envelope routines::unsupported webpack/webpack-dev-server#3961

Closed

zloirock added a commit to zloirock/core-js that referenced this issue Oct 20, 2021

fix core-js-builder work in NodeJS 17, add a workaround of `webpack…

81cacee

…` + NodeJS 17 issue webpack/webpack#14532

crashmax-dev mentioned this issue Oct 20, 2021

Node 17: digital envelope routines::unsupported crashmax-dev/webpack-umd-template#1

Closed

teallarson mentioned this issue Oct 20, 2021

limit node versions to under 17 grouparoo/grouparoo#2437

Merged

7 tasks

haoqunjiang mentioned this issue Oct 21, 2021

Impossible to serve with Node v17.0.1 vuejs/vue-cli#6770

Closed

jdambron mentioned this issue Oct 21, 2021

webpack broken with nodejs 17: digital envelope routines::unsupported shapeshift/web#207

Closed

anshumanv mentioned this issue Oct 21, 2021

chore: run tests on node 17.x in CI webpack/webpack-dev-server#3965

Merged

6 tasks

luqven mentioned this issue Oct 21, 2021

[PE-389-1][PE-1517] chore: remove the domain prop imgix/sf-commerce-cloud#51

Merged

rap1ds mentioned this issue May 14, 2024

Fix MacOS dev sharetribe/flex-sdk-js#198

Merged

myZhangDong mentioned this issue May 27, 2024

Web sample is not working on build AgoraIO/Agora-Chat-API-Examples#83

Open

pabo99 mentioned this issue Jun 19, 2024

Using a node version compatible with canvas in the release workflow omegaup/karel.js#183

Merged

jldec mentioned this issue Jul 1, 2024

yarn dev error:0308010C:digital envelope routines::unsupported maccman/the-managers-handbook#3

Open

peteryates mentioned this issue Jul 16, 2024

Upgrade Ruby to 3.3.4 DFE-Digital/npq-registration#1511

Merged

adanop7721 added a commit to adanop7721/react-lineto that referenced this issue Sep 9, 2024

Fix webpack build error

1b74645

See webpack/webpack#14532

lucacasonato mentioned this issue Sep 16, 2024

Digest method not supported: md4 denoland/deno#25646

Closed

coolsoftwaretyler mentioned this issue Sep 19, 2024

Upgrade to Webpack 5 (or Vite, or something else for local playgrounds) mobxjs/mobx-devtools#119

Closed

mimi89999 mentioned this issue Sep 23, 2024

Fails to run with latest node rustwasm/create-wasm-app#214

Open

seung-00 mentioned this issue Sep 29, 2024

[ZEPPELIN-6110] Specify the Node.js engine version below 17 in the web-angular apache/zeppelin#4848

Merged

This was referenced Oct 27, 2024

docs: updated troubleshooting guide while using node version 18 sahanar11/bundlephobia#1

Open

docs: updated troubleshooting guide while using node version 18 pastelsky/bundlephobia#897

Open

xcarol added a commit to xcarol/xicra that referenced this issue Nov 28, 2024

fix: webpack openssl legacy provider

22032c7

webpack/webpack#14532

Oleksandr0305 added a commit to Oleksandr0305/react-rails that referenced this issue Feb 1, 2025

Set node options for OpenSSL legacy provider

9849a75

Reference: webpack/webpack#14532 (comment)

denis-sh mentioned this issue Feb 14, 2025

Webpack dev-server fails to run with node 17.0.1+ rustwasm/rust-webpack-template#179

Open

nikukyugamer mentioned this issue Apr 20, 2025

feat: 🎸 Node.js のバージョンを v22.14.0 に変更した true-runes/suikoden-election-2018#773

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

nodejs 17: digital envelope routines::unsupported #14532

nodejs 17: digital envelope routines::unsupported #14532

akornatskyy commented Oct 19, 2021

alexander-akait commented Oct 19, 2021 •

edited

Loading

alexander-akait commented Oct 19, 2021

akornatskyy commented Oct 19, 2021

zloirock commented Oct 19, 2021

alexander-akait commented Oct 20, 2021

sokra commented Oct 20, 2021

alexander-akait commented Oct 20, 2021

sokra commented Oct 20, 2021

alexander-akait commented Oct 20, 2021 •

edited

Loading

MaxGraey commented Oct 20, 2021 •

edited

Loading

FSM1 commented Oct 22, 2021

akornatskyy commented Oct 22, 2021 •

edited

Loading

krisnaRusdiono commented May 27, 2024 •

edited

Loading

Sinc63 commented Aug 19, 2024

martinellison commented Aug 31, 2024 •

edited

Loading

Ohiekkar commented Sep 27, 2024

Wissaladd commented Nov 10, 2024 •

edited

Loading

devsheva commented Nov 16, 2024

pvspain commented Feb 25, 2025

LoganTann commented Mar 11, 2025

EthanDarling8 commented Mar 12, 2025

patiltukaram commented Apr 9, 2025

alexander-akait commented Apr 9, 2025

nodejs 17: digital envelope routines::unsupported #14532

nodejs 17: digital envelope routines::unsupported #14532

Comments

akornatskyy commented Oct 19, 2021

Bug report

alexander-akait commented Oct 19, 2021 • edited Loading

alexander-akait commented Oct 19, 2021

akornatskyy commented Oct 19, 2021

zloirock commented Oct 19, 2021

alexander-akait commented Oct 20, 2021

sokra commented Oct 20, 2021

alexander-akait commented Oct 20, 2021

sokra commented Oct 20, 2021

alexander-akait commented Oct 20, 2021 • edited Loading

MaxGraey commented Oct 20, 2021 • edited Loading

FSM1 commented Oct 22, 2021

akornatskyy commented Oct 22, 2021 • edited Loading

krisnaRusdiono commented May 27, 2024 • edited Loading

Sinc63 commented Aug 19, 2024

martinellison commented Aug 31, 2024 • edited Loading

Ohiekkar commented Sep 27, 2024

Wissaladd commented Nov 10, 2024 • edited Loading

devsheva commented Nov 16, 2024

pvspain commented Feb 25, 2025

LoganTann commented Mar 11, 2025

EthanDarling8 commented Mar 12, 2025

patiltukaram commented Apr 9, 2025

alexander-akait commented Apr 9, 2025

alexander-akait commented Oct 19, 2021 •

edited

Loading

alexander-akait commented Oct 20, 2021 •

edited

Loading

MaxGraey commented Oct 20, 2021 •

edited

Loading

akornatskyy commented Oct 22, 2021 •

edited

Loading

krisnaRusdiono commented May 27, 2024 •

edited

Loading

martinellison commented Aug 31, 2024 •

edited

Loading

Wissaladd commented Nov 10, 2024 •

edited

Loading