--- /etc/ssl/openssl.cnf.orig	2022-07-04 20:20:23.000000000 +0900
+++ /etc/ssl/openssl.cnf	2022-12-07 00:53:41.171961600 +0900
@@ -57,6 +57,7 @@
 # List of providers to load
 [provider_sect]
 default = default_sect
+legacy = legacy_sect
 # The fips section name should match the section name inside the
 # included fipsmodule.cnf.
 # fips = fips_sect
@@ -70,8 +71,9 @@
 # OpenSSL may not work correctly which could lead to significant system
 # problems including inability to remotely access the system.
 [default_sect]
-# activate = 1
-
+activate = 1
+[legacy_sect]
+activate = 1
 
 ####################################################################
 [ ca ]