Hello Alexey Serbin, Ashwani Raina, Kudu Jenkins, Abhishek Chennaka,
I'd like you to reexamine a change. Please visit
http://gerrit.cloudera.org:8080/23681
to look at the new patch set (#3).
Change subject: KUDU-3716 Add version to IPKI CA CSR
......................................................................
KUDU-3716 Add version to IPKI CA CSR
OpenSSL 3.4.0 added a version check to certificate signing that causes
signing previously working certificate signing requests to fail with the
below error:
Runtime error: failed to self-sign cert: CSR signature verification error:
error:05800091:x509 certificate routines::unsupported
version:crypto/x509/x_all.c:47:X509_REQ_verify_ex
This patch fixes this problem by setting the version on the CSR.
While X509_REQ_set_version() has been there since forever,
the version constant X509_REQ_VERSION_1 was added only in OpenSSL 3.0,
so this X509_REQ_set_version() call is added only in OpenSSL >= 3.0.
Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95
---
M src/kudu/security/ca/cert_management-test.cc
M src/kudu/security/ca/cert_management.cc
2 files changed, 12 insertions(+), 0 deletions(-)
git pull ssh://gerrit.cloudera.org:29418/kudu refs/changes/81/23681/3
--
To view, visit http://gerrit.cloudera.org:8080/23681
To unsubscribe, visit http://gerrit.cloudera.org:8080/settings
Gerrit-Project: kudu
Gerrit-Branch: master
Gerrit-MessageType: newpatchset
Gerrit-Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95
Gerrit-Change-Number: 23681
Gerrit-PatchSet: 3
Gerrit-Owner: Attila Bukor <[email protected]>
Gerrit-Reviewer: Abhishek Chennaka <[email protected]>
Gerrit-Reviewer: Alexey Serbin <[email protected]>
Gerrit-Reviewer: Ashwani Raina <[email protected]>
Gerrit-Reviewer: Attila Bukor <[email protected]>
Gerrit-Reviewer: Kudu Jenkins (120)
