Attila Bukor has submitted this change and it was merged. ( http://gerrit.cloudera.org:8080/23681 )
Change subject: KUDU-3716 Add version to IPKI CA CSR ...................................................................... KUDU-3716 Add version to IPKI CA CSR OpenSSL 3.4.0 added a version check to certificate signing that causes signing previously working CSRs to fail with the below error: Runtime error: failed to self-sign cert: CSR signature verification error: error:05800091:x509 certificate routines::unsupported version:crypto/x509/x_all.c:47:X509_REQ_verify_ex This patch fixes this problem by setting the version on the CSR. While X509_REQ_set_version() has been there since forever, the version constant X509_REQ_VERSION_1 was added only in OpenSSL 3.0, so this X509_REQ_set_version() call is added only in OpenSSL >= 3.0. Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95 Reviewed-on: http://gerrit.cloudera.org:8080/23681 Reviewed-by: Alexey Serbin <[email protected]> Reviewed-by: Ashwani Raina <[email protected]> Tested-by: Attila Bukor <[email protected]> --- M src/kudu/security/ca/cert_management-test.cc M src/kudu/security/ca/cert_management.cc 2 files changed, 14 insertions(+), 0 deletions(-) Approvals: Alexey Serbin: Looks good to me, approved Ashwani Raina: Looks good to me, but someone else must approve Attila Bukor: Verified -- To view, visit http://gerrit.cloudera.org:8080/23681 To unsubscribe, visit http://gerrit.cloudera.org:8080/settings Gerrit-Project: kudu Gerrit-Branch: master Gerrit-MessageType: merged Gerrit-Change-Id: I735a56d444009a867fbcab9b78d0053cea593b95 Gerrit-Change-Number: 23681 Gerrit-PatchSet: 5 Gerrit-Owner: Attila Bukor <[email protected]> Gerrit-Reviewer: Abhishek Chennaka <[email protected]> Gerrit-Reviewer: Alexey Serbin <[email protected]> Gerrit-Reviewer: Ashwani Raina <[email protected]> Gerrit-Reviewer: Attila Bukor <[email protected]> Gerrit-Reviewer: Kudu Jenkins (120)
