Jira (PUP-11849) CRL authorityKeyIdentifier is not printed in puppet8

[Josh Cooper (Jira)]

Title: Message Title

Josh Cooper created an issue   Puppet / PUP-11849 CRL authorityKeyIdentifier is not printed in puppet8 Issue Type: Bug Affects Versions: PUP 8.0.0 Assignee: Unassigned Created: 2023/05/10 11:47 AM Priority: Normal Reporter: Josh Cooper In puppet 7, the agent prints the authorityKeyIdentifier for each CRL like: Debug: Using CRL 'CN=Puppet CA: <fqdn>' authorityKeyIdentifier 'keyid:2E:53:A9:06:E8:90:B1:DA:46:CD:25:47:3A:0B:F5:92:00:BE:D3:A5' crlNumber '0' In puppet 8 with openssl 3, it's missing: Debug: Using CRL 'CN=Puppet CA: <fqdn>' authorityKeyIdentifier '' crlNumber '0' Something is not right with the way the ruby bindings retrieve the CRL extensions in https://github.com/puppetlabs/puppet/blob/ad7d75b08dfff5e308fde199407d84308d74e538/lib/puppet/ssl/ssl_provider.rb#L225-L230 Add Comment   This message was sent by Atlassian Jira (v8.20.11#820011-sha1:0629dd8) -- You received this message because you are subscribed to the Google Groups "Puppet Bugs" group. To unsubscribe from this group and stop receiving emails from it, send an email to puppet-bugs+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/puppet-bugs/JIRA.485441.1683744464000.12287.1683744480097%40Atlassian.JIRA.