From c2a1c310bc8cd6911c854541cd51d7a0e5751664 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Charaoui?= Date: Sat, 25 Jan 2025 13:19:50 -0500 Subject: [PATCH] (maint) Drop setting value for csr.version OpenSSL versions 3.4.0 and later no longer support setting a CSR version other than 1, because there are no other valid versions. Rather, it is recommended to stop specificying a CSR version altogether. https://github.com/openssl/openssl/commit/397051a40db2d68433b842e7505e8cf3c9effb36 --- dev-resources/regen_certs.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/dev-resources/regen_certs.rb b/dev-resources/regen_certs.rb index daa3609795..767d80f279 100644 --- a/dev-resources/regen_certs.rb +++ b/dev-resources/regen_certs.rb @@ -78,7 +78,6 @@ def self.create_csr(name, key = PuppetSpec::SSL.create_private_key) csr.public_key = key.public_key csr.subject = OpenSSL::X509::Name.parse(name) - csr.version = 2 csr.sign(key, DEFAULT_SIGNING_DIGEST) csr