OpenSSL decryption fails with unknown option '-pbkdf2'

Build Environment
1

OpenSSL decryption fails, because CircleCI uses outdated version that doesn’t support -pbkdf2. Running it on CircleCI side fails.

$ openssl aes-256-cbc -pbkdf2 -in .env.ci.enc -pass pass:$CIRCLE_ENC_KEY -d
unknown option '-pbkdf2'
...

Need a newer openssl.

2

Hi Anatoli. What executor are you running this under?

3

I guess it is docker.

jobs:
  test:
    docker:
        - image: docker:18.05.0-ce-git
4

Ok. Since that’s not a CircleCI image, it would be on upsteam to have the version of openSSL current. What happens when you try updating it with sudo apt-get update && sudo apt-get install openssl?

5

I am afraid it is Alpine 3.7.

6

Ok, looks like it’s this then:

    -run: apk update 
    -run: apk add openssh
7

Need to fix the problem with the image first.

Is it possible to use bash inside docker executor instead of sh?

8

With apk update

OpenSSL 1.0.2r  26 Feb 2019

Without apk update

OpenSSL 1.0.2r  26 Feb 2019