Bug 2216935 - compat-openssl11: FTBFS due to expired test certificates
Summary: compat-openssl11: FTBFS due to expired test certificates
Keywords:
Status: NEW
Alias: None
Product: Red Hat Enterprise Linux 9
Classification: Red Hat
Component: compat-openssl11
Version: 9.3
Hardware: Unspecified
OS: Unspecified
low
medium
Target Milestone: rc
: ---
Assignee: Dmitry Belyavskiy
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2023-06-23 10:22 UTC by Florian Weimer
Modified: 2023-06-28 11:44 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed:
Type: Bug
Target Upstream Version:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Issue Tracker CRYPTO-11019 0 None None None 2023-06-28 11:44:43 UTC
Red Hat Issue Tracker RHELPLAN-160549 0 None None None 2023-06-23 10:23:26 UTC

Description Florian Weimer 2023-06-23 10:22:25 UTC 
The following upstream commits need to be backported to get the package to build:

commit ab7d05617a444cfcf4f930f81caa4cf66495ab9b
Author: Tomas Mraz <tomas>
Date:   Thu Jun 2 18:12:05 2022 +0200

    Update further expiring certificates that affect tests
    
    Namely the smime certificates used in test_cms
    will expire soon and affect tests.
    
    Fixes #15179
    
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    Reviewed-by: Paul Dale <pauli>
    (Merged from https://github.com/openssl/openssl/pull/18481)

commit 73db5d82489b3ec09ccc772dfcee14fef0e8e908
Author: Tomas Mraz <tomas>
Date:   Wed Jun 1 12:47:44 2022 +0200

    Update expired SCT certificates
    
    Reviewed-by: Matt Caswell <matt>
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    (Merged from https://github.com/openssl/openssl/pull/18446)

commit b7ce611887cfac633aacc052b2e71a7f195418b8
Author: Tomas Mraz <tomas>
Date:   Wed Jun 1 13:06:46 2022 +0200

    ct_test.c: Update the epoch time
    
    Reviewed-by: Matt Caswell <matt>
    Reviewed-by: Dmitry Belyavskiy <beldmit>
    (Merged from https://github.com/openssl/openssl/pull/18446)
Note You need to log in before you can comment on or make changes to this bug.