Package: m2crypto
Version: 0.42.0-1
Severity: important
Tags: sid patch
control: affects -1 src:openssl
User: pkg-openssl-de...@lists.alioth.debian.org
Usertags: openssl-3.4
OpenSSL verifies the argument passed to X509_REQ_set_version() resulting
in a failure. Patch attached fixes the issue.
Sebastian
From: Sebastian Andrzej Siewior <sebast...@breakpoint.cc>
Date: Sun, 20 Oct 2024 21:14:11 +0200
Subject: [PATCH] test_x509: Use only X509_VERSION_1 (0) as version for CSR.
RFC 2986 only defines a single version for CSRs: X509_VERSION_1 (0).
OpenSSL starting with 3.4 rejects everything else.
Remove the tests where X509_VERSION_2 (1) is used X509_REQ_set_version.
Signed-off-by: Sebastian Andrzej Siewior <sebast...@breakpoint.cc>
---
tests/test_x509.py | 2 --
1 file changed, 2 deletions(-)
diff --git a/tests/test_x509.py b/tests/test_x509.py
index 5ec4af06fc8b3..568e1711d19b4 100644
--- a/tests/test_x509.py
+++ b/tests/test_x509.py
@@ -240,8 +240,6 @@ log = logging.getLogger(__name__)
self.assertEqual(req.as_text(), req4t)
self.assertEqual(req.as_der(), req4.as_der())
self.assertEqual(req.get_version(), 0)
- req.set_version(1)
- self.assertEqual(req.get_version(), 1)
req.set_version(0)
self.assertEqual(req.get_version(), 0)
--
2.45.2
