运行npm start时出现Error: error:0308010C:digital envelope routines::unsupported错误

问题概述 #

我有一个基于Trydo模板的老旧React项目，使用Node.js v18.15.0版本。执行npm start、npm run test等命令时均出现ERR_OSSL_EVP_UNSUPPORTED错误，执行npm install时提示存在66个漏洞（2个低危、21个中危、34个高危、9个严重）。项目包含scripts子文件夹，内含build.js、start.js和test.js。

报错详情 #

执行npm start时的错误输出：

> trydo@0.1.0 start
> node scripts/start.js
Starting the development server...

Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:71:19)
    at Object.createHash (node:crypto:133:10)
    at module.exports (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\util\createHash.js:90:53)
    at NormalModule._initBuildHash (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:401:16)
    at handleParseError (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:449:10)
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:481:5
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:342:12
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:373:3
    at iterateNormalLoaders (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:214:10)
    at iterateNormalLoaders (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:221:10)
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:236:3
    at runSyncOrAsync (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:130:11)
    at iterateNormalLoaders (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:232:2)
    at Array.<anonymous> (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:205:4)
    at Storage.finished (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\enhanced-resolve\lib\CachedInputFileSystem.js:55:16)
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\enhanced-resolve\lib\CachedInputFileSystem.js:91:9
C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\scripts\start.js:11
  throw err;
  ^

Error: error:0308010C:digital envelope routines::unsupported
    at new Hash (node:internal/crypto/hash:71:19)
    at Object.createHash (node:crypto:133:10)
    at module.exports (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\util\createHash.js:90:53)
    at NormalModule._initBuildHash (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:401:16)
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:433:10
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\webpack\lib\NormalModule.js:308:13
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:367:11
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:233:18
    at context.callback (C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\loader-runner\lib\LoaderRunner.js:111:13)
    at C:\Users\megih\OneDrive\Documents\DiGiLABS\AdchemIndustries_Website\node_modules\babel-loader\lib\index.js:51:103 {
  opensslErrorStack: [ 'error:03000086:digital envelope routines::initialization error' ],
  library: 'digital envelope routines',
  reason: 'unsupported',
  code: 'ERR_OSSL_EVP_UNSUPPORTED'
}

Node.js v18.15.0

项目package.json内容 #

{
  "name": "trydo",
  "version": "0.1.0",
  "private": true,
  "homepage": "http://trydo.rainbowit.net",
  "basename": "/",
  "dependencies": {
    "@babel/core": "7.4.3",
    "@material-ui/core": "^4.11.3",
    "@svgr/webpack": "4.1.0",
    "@typescript-eslint/eslint-plugin": "1.6.0",
    "@typescript-eslint/parser": "1.6.0",
    "babel-eslint": "10.0.1",
    "babel-jest": "^24.9.0",
    "babel-loader": "8.0.5",
    "babel-plugin-named-asset-import": "^0.3.5",
    "babel-preset-react-app": "^9.1.0",
    "bootstrap": "^4.4.1",
    "camelcase": "^5.2.0",
    "case-sensitive-paths-webpack-plugin": "2.2.0",
    "css-loader": "2.1.1",
    "dotenv": "6.2.0",
    "dotenv-expand": "4.2.0",
    "eslint": "^5.16.0",
    "eslint-config-react-app": "^4.0.1",
    "eslint-loader": "2.1.2",
    "eslint-plugin-flowtype": "2.50.1",
    "eslint-plugin-import": "2.16.0",
    "eslint-plugin-jsx-a11y": "6.2.1",
    "eslint-plugin-react": "7.12.4",
    "eslint-plugin-react-hooks": "^1.7.0",
    "file-loader": "3.0.1",
    "fs-extra": "7.0.1",
    "google-map-react": "^1.1.5",
    "html-webpack-plugin": "4.0.0-beta.5",
    "identity-obj-proxy": "3.0.0",
    "is-wsl": "^1.1.0",
    "jest": "24.7.1",
    "jest-environment-jsdom-fourteen": "0.1.0",
    "jest-resolve": "24.7.1",
    "jest-watch-typeahead": "0.3.0",
    "mini-css-extract-plugin": "0.5.0",
    "node-sass": "^8.0.0",
    "optimize-css-assets-webpack-plugin": "5.0.1",
    "pnp-webpack-plugin": "1.2.1",
    "postcss-flexbugs-fixes": "4.1.0",
    "postcss-loader": "3.0.0",
    "postcss-normalize": "7.0.1",
    "postcss-preset-env": "6.6.0",
    "postcss-safe-parser": "4.0.1",
    "react": "^16.12.0",
    "react-accessible-accordion": "^3.0.1",
    "react-animate-on-scroll": "^2.1.5",
    "react-app-polyfill": "^1.0.5",
    "react-bootstrap": "^1.0.0-beta.16",
    "react-countup": "^4.3.2",
    "react-dev-utils": "^9.1.0",
    "react-dom": "^16.12.0",
    "react-helmet": "^5.2.1",
    "react-icons": "^3.8.0",
    "react-image-lightbox": "^5.1.1",
    "react-modal-video": "^1.2.3",
    "react-parallax": "^3.0.3",
    "react-particles-js": "^2.7.0",
    "react-reveal": "^1.2.2",
    "react-router-dom": "^5.1.2",
    "react-scroll-up": "^1.3.3",
    "react-scrollspy": "^3.4.2",
    "react-slick": "^0.24.0",
    "react-tabs": "^3.1.0",
    "react-text-loop": "^2.3.0",
    "react-tilt": "^0.1.4",
    "react-video-tag": "0.0.10",
    "react-visibility-sensor": "^5.1.1",
    "resolve": "1.10.0",
    "sass-loader": "^7.3.1",
    "semver": "6.0.0",
    "slick-carousel": "^1.8.1",
    "style-loader": "0.23.1",
    "terser-webpack-plugin": "1.2.3",
    "ts-pnp": "1.1.2",
    "url-loader": "1.1.2",
    "webpack": "4.29.6",
    "webpack-dev-server": "3.2.1",
    "webpack-manifest-plugin": "2.0.4",
    "workbox-webpack-plugin": "4.2.0"
  },
  "scripts": {
    "start": "node scripts/start.js",
    "build": "node scripts/build.js",
    "test": "node scripts/test.js"
  },
  "eslintConfig": {
    "extends": "react-app"
  },
  "browserslist": {
    "production": [
      ">0.2%",
      "not dead",
      "not op_mini all"
    ],
    "development": [
      "last 1 chrome version",
      "last 1 firefox version",
      "last 1 safari version"
    ]
  },
  "jest": {
    "collectCoverageFrom": [
      "src/**/*.{js,jsx,ts,tsx}",
      "!src/**/*.d.ts"
    ],
    "setupFiles": [
      "react-app-polyfill/jsdom"
    ],
    "setupFilesAfterEnv": [],
    "testMatch": [
      "<rootDir>/src/**/__tests__/**/*.{js,jsx,ts,tsx}",
      "<rootDir>/src/**/*.{spec,test}.{js,jsx,ts,tsx}"
    ],
    "testEnvironment": "jest-environment-jsdom-fourteen",
    "transform": {
      "^.+\\.(js|jsx|ts|tsx)$": "<rootDir>/node_modules/babel-jest",
      "^.+\\.css$": "<rootDir>/config/jest/cssTransform.js",
      "^(?!.*\\.(js|jsx|ts|tsx|css|json)$)": "<rootDir>/config/jest/fileTransform.js"
    },
    "transformIgnorePatterns": [
      "[/\\\\]node_modules[/\\\\].+\\.(js|jsx|ts|tsx)$",
      "^.+\\.module\\.(css|sass|scss)$"
    ],
    "modulePaths": [],
    "moduleNameMapper": {
      "^react-native$": "react-native-web",
      "^.+\\.module\\.(css|sass|scss)$": "identity-obj-proxy"
    },
    "moduleFileExtensions": [
      "web.js",
      "js",
      "web.ts",
      "ts",
      "web.tsx",
      "tsx",
      "json",
      "web.jsx",
      "jsx",
      "node"
    ],
    "watchPlugins": [
      "jest-watch-typeahead/filename",
      "jest-watch-typeahead/testname"
    ]
  },
  "babel": {
    "presets": [
      "react-app"
    ]
  }
}

解决方法 #

1. 临时修复：启用旧版SSL算法 #

修改package.json中的scripts，添加NODE_OPTIONS=--openssl-legacy-provider环境变量，让Node.js兼容webpack 4使用的哈希算法：

"scripts": {
  "start": "NODE_OPTIONS=--openssl-legacy-provider node scripts/start.js",
  "build": "NODE_OPTIONS=--openssl-legacy-provider node scripts/build.js",
  "test": "NODE_OPTIONS=--openssl-legacy-provider node scripts/test.js"
}

修改后重新执行npm start即可正常启动项目。

2. 长期方案：升级依赖（推荐） #

项目依赖版本过于老旧，不仅存在安全漏洞，还会和新版本Node.js产生兼容性问题，建议逐步升级：

• 优先升级webpack到v5.x，同时配套升级webpack-dev-server、babel-loader、html-webpack-plugin等相关依赖
• 升级React和React DOM到v18.x，同步检查第三方UI库（如@material-ui/core、react-bootstrap）的兼容性，升级到支持React 18的版本
• 执行npm audit fix修复可自动修复的漏洞，对于无法自动修复的依赖，手动更新版本号或寻找替代库

3. 降级Node.js版本 #

如果暂时不想升级依赖，可以将Node.js降级到v16.x LTS版本，该版本默认支持webpack 4所需的哈希算法，不会出现SSL相关错误。

内容的提问来源于stack exchange，提问作者Dhruv Singh Negi