From e89ba32d30fc7b68657943e02e5c81c727bcfcba Mon Sep 17 00:00:00 2001 From: Denis Kenzior Date: Sun, 31 Dec 2023 11:01:31 -0600 Subject: [PATCH] build: Fix build with openssl 3.2 make --no-print-directory all-am openssl req -new -extensions cert_ext \ -config ./unit/gencerts.cnf \ -subj '/O=Foo Example Organization/CN=Foo Example Organization/emailAddress=foo@mail.example' \ -key unit/cert-server-key.pem -out unit/cert-server.csr Error adding request extensions from section cert_ext 4057AC4D6F7F0000:error:11000079:X509 V3 routines:v2i_AUTHORITY_KEYID:no issuer certificate:crypto/x509/v3_akid.c:156: 4057AC4D6F7F0000:error:11000080:X509 V3 routines:X509V3_EXT_nconf_int:error in extension:crypto/x509/v3_conf.c:48:section=cert_ext, name=authorityKeyIdentifier, value=keyid:always,issuer:always make[1]: *** [Makefile:3962: unit/cert-server.csr] Error 1 --- unit/gencerts.cnf | 1 - 1 file changed, 1 deletion(-) diff --git a/unit/gencerts.cnf b/unit/gencerts.cnf index ffbadfe6..107b0f02 100644 --- a/unit/gencerts.cnf +++ b/unit/gencerts.cnf @@ -16,7 +16,6 @@ authorityKeyIdentifier = keyid:always,issuer:always [ cert_ext ] basicConstraints = CA:FALSE subjectKeyIdentifier = hash -authorityKeyIdentifier = keyid:always,issuer:always [ server_ext ] basicConstraints = CA:FALSE