Hello Kudu Jenkins, Abhishek Chennaka,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/23681
to look at the new patch set (#2).
Change subject: KUDU-3716 Add version to IPKI CA CSR
......................................................................
KUDU-3716 Add version to IPKI CA CSR
OpenSSL 3.5.1 added a version check to certificate signing that causes
signing previously working certificate signing requests to fail with the
below error:
Runtime error: failed to self-sign cert: CSR signature verification error:
error:05800091:x509 certificate routines::unsupported
version:crypto/x509/x_all.c:47:X509_REQ_verify_ex
This patch fixes this problem by setting the version on the CSR.
While X509_REQ_set_version() has been there since forever,
the version constant X509_REQ_VERSION_1 was added only in OpenSSL 3.0,
so this X509_REQ_set_version() call is added only in OpenSSL >= 3.0.
Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95
---
M src/kudu/security/ca/cert_management.cc
1 file changed, 9 insertions(+), 0 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/81/23681/2
--
To view, visit http://gerrit.cloudera.org:8080/23681
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95
Gerrit-Change-Number: 23681
Gerrit-PatchSet: 2
Gerrit-Owner: Attila Bukor <[email protected]>
Gerrit-Reviewer: Abhishek Chennaka <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
