From 249bdfcbf2b7538c5265923d6b611f222b3e5b79 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?J=C3=A9r=C3=B4me=20Charaoui?= Date: Sat, 25 Jan 2025 09:51:46 -0500 Subject: [PATCH] Drop setting value for csr.version, fixes #124 OpenSSL versions 3.4.0 and later no longer support setting a CSR version other than 1, because there are no other valid versions. Rather, it is recommended to stop specificying a CSR version altogether. https://github.com/openssl/openssl/commit/397051a40db2d68433b842e7505e8cf3c9effb36 --- lib/puppetserver/ca/host.rb | 1 - 1 file changed, 1 deletion(-) diff --git a/lib/puppetserver/ca/host.rb b/lib/puppetserver/ca/host.rb index 377f099..3738e62 100644 --- a/lib/puppetserver/ca/host.rb +++ b/lib/puppetserver/ca/host.rb @@ -80,7 +80,6 @@ def create_csr(name:, key:, cli_extensions: [], csr_attributes_path: '') csr = OpenSSL::X509::Request.new csr.public_key = key.public_key csr.subject = OpenSSL::X509::Name.new([["CN", name]]) - csr.version = 2 custom_attributes = get_custom_attributes(csr_attributes_path) extension_requests = get_extension_requests(csr_attributes_path)