Skip to content

Use both ssl pin commits#4040

Merged
openshift-merge-bot[bot] merged 2 commits into
openstack-k8s-operators:mainfrom
michburk:pin-ssl
Jul 8, 2026
Merged

Use both ssl pin commits#4040
openshift-merge-bot[bot] merged 2 commits into
openstack-k8s-operators:mainfrom
michburk:pin-ssl

Conversation

@michburk

@michburk michburk commented Jul 7, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

We have an ongoing SSL issue, combining two existing prs/commits into this one pr

@openshift-ci

openshift-ci Bot commented Jul 7, 2026

Copy link
Copy Markdown
Contributor

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@michburk michburk marked this pull request as ready for review July 7, 2026 14:09
@michburk michburk closed this Jul 7, 2026
@michburk michburk reopened this Jul 7, 2026
rabi and others added 2 commits July 7, 2026 14:35
@rabi @michburk
Pin OpenSSL
a1e67eb 
Change-Id: Ib0b1f31c59984dcac63f72199ccbe3180df3dd9f
Signed-off-by: rabi <ramishra@redhat.com>
@lmiccini @michburk
[setup_molecule] Workaround OpenSSL 3.5.x breaking Ansible url lookups
6e46512 
OpenSSL >= 3.5.6 introduced strict DER validation that rejects some
real-world CA root certificates with non-standard encoding
(openssl/openssl#25023). This causes Ansible 2.15's url lookup plugin
to fail with "ASN1: NOT_ENOUGH_DATA" when load_verify_locations is
called with DER-encoded cadata.

Pin openssl to 3.5.5 until the issue is resolved upstream.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Signed-off-by: Luca Miccini <lmiccini@redhat.com>
@michburk michburk changed the title [dnm] trying both ssl pin commits Use both ssl pin commits Jul 7, 2026
@michburk

michburk commented Jul 7, 2026

Copy link
Copy Markdown
Contributor Author

recheck

evallesp
evallesp approved these changes Jul 8, 2026
View reviewed changes

@evallesp evallesp left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@openshift-ci openshift-ci Bot added the lgtm label Jul 8, 2026
Valkyrie00
Valkyrie00 approved these changes Jul 8, 2026
View reviewed changes

@Valkyrie00 Valkyrie00 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

@openshift-ci

openshift-ci Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Valkyrie00

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved label Jul 8, 2026
@eduolivares

eduolivares commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

/cherry-pick 18.0-fr6

@openshift-cherrypick-robot

openshift-cherrypick-robot commented Jul 8, 2026

Copy link
Copy Markdown

@eduolivares: once the present PR merges, I will cherry-pick it on top of 18.0-fr6 in a new PR and assign it to you.

Details

In response to this:

/cherry-pick 18.0-fr6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot openshift-merge-bot Bot merged commit 9535333 into openstack-k8s-operators:main Jul 8, 2026
15 checks passed
@openshift-cherrypick-robot

openshift-cherrypick-robot commented Jul 8, 2026

Copy link
Copy Markdown

@eduolivares: new pull request created: #4042

Details

In response to this:

/cherry-pick 18.0-fr6

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-cherrypick-robot openshift-cherrypick-robot mentioned this pull request Jul 8, 2026
Merged
@michburk michburk mentioned this pull request Jul 8, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Valkyrie00 Valkyrie00 Valkyrie00 approved these changes
@evallesp evallesp evallesp approved these changes

Assignees

@evallesp evallesp

Labels

approved lgtm Ready For Review

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

7 participants

@michburk @eduolivares @openshift-cherrypick-robot @Valkyrie00 @evallesp @rabi @lmiccini