Bug 2216935

Summary:	compat-openssl11: FTBFS due to expired test certificates
Product:	Red Hat Enterprise Linux 9	Reporter:	Florian Weimer <fweimer>
Component:	compat-openssl11	Assignee:	Dmitry Belyavskiy <dbelyavs>
Status:	NEW ---	QA Contact:	BaseOS QE Security Team <qe-baseos-security>
Severity:	medium	Docs Contact:
Priority:	low
Version:	9.3	CC:	cllang
Target Milestone:	rc	Keywords:	Triaged
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Florian Weimer 2023-06-23 10:22:25 UTC

The following upstream commits need to be backported to get the package to build:

commit ab7d05617a444cfcf4f930f81caa4cf66495ab9b
Author: Tomas Mraz <tomas>
Date:   Thu Jun 2 18:12:05 2022 +0200

    Update further expiring certificates that affect tests
    
    Namely the smime certificates used in test_cms
    will expire soon and affect tests.
    
    Fixes #15179
    
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    Reviewed-by: Paul Dale <pauli>
    (Merged from https://github.com/openssl/openssl/pull/18481)

commit 73db5d82489b3ec09ccc772dfcee14fef0e8e908
Author: Tomas Mraz <tomas>
Date:   Wed Jun 1 12:47:44 2022 +0200

    Update expired SCT certificates
    
    Reviewed-by: Matt Caswell <matt>
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    (Merged from https://github.com/openssl/openssl/pull/18446)

commit b7ce611887cfac633aacc052b2e71a7f195418b8
Author: Tomas Mraz <tomas>
Date:   Wed Jun 1 13:06:46 2022 +0200

    ct_test.c: Update the epoch time
    
    Reviewed-by: Matt Caswell <matt>
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    (Merged from https://github.com/openssl/openssl/pull/18446)