[setup_molecule] Workaround OpenSSL 3.5.x breaking Ansible url lookups#4038
Conversation
OpenSSL >= 3.5.6 introduced strict DER validation that rejects some real-world CA root certificates with non-standard encoding (openssl/openssl#25023). This causes Ansible 2.15's url lookup plugin to fail with "ASN1: NOT_ENOUGH_DATA" when load_verify_locations is called with DER-encoded cadata. Pin openssl to 3.5.5 until the issue is resolved upstream. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> Signed-off-by: Luca Miccini <lmiccini@redhat.com>
|
example pr impacted by this issue: openstack-k8s-operators/infra-operator#617 |
|
/approve |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: nemarjan, Valkyrie00 The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
/test images |
|
/test images |
1 similar comment
|
/test images |
|
/retest |
openshift-merge-bot
Bot
merged commit 1bc9f55
into
openstack-k8s-operators:main
|
/cherry-pick 18.0-fr6 |
|
@eduolivares: new pull request created: #4041 DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
6 participants
OpenSSL >= 3.5.6 introduced strict DER validation that rejects some real-world CA root certificates with non-standard encoding (openssl/openssl#25023). This causes Ansible 2.15's url lookup plugin to fail with "ASN1: NOT_ENOUGH_DATA" when load_verify_locations is called with DER-encoded cadata.
Pin openssl to 3.5.5 until the issue is resolved upstream.