Skip to content

[18.0-fr6] [setup_molecule] Workaround OpenSSL 3.5.x breaking Ansible url lookups#4041

Closed
openshift-cherrypick-robot wants to merge 1 commit into
openstack-k8s-operators:18.0-fr6from
openshift-cherrypick-robot:cherry-pick-4038-to-18.0-fr6
Closed

[18.0-fr6] [setup_molecule] Workaround OpenSSL 3.5.x breaking Ansible url lookups#4041
openshift-cherrypick-robot wants to merge 1 commit into
openstack-k8s-operators:18.0-fr6from
openshift-cherrypick-robot:cherry-pick-4038-to-18.0-fr6

Conversation

@openshift-cherrypick-robot

Copy link
Copy Markdown

This is an automated cherry-pick of #4038

/assign eduolivares

OpenSSL >= 3.5.6 introduced strict DER validation that rejects some
real-world CA root certificates with non-standard encoding
(openssl/openssl#25023). This causes Ansible 2.15's url lookup plugin
to fail with "ASN1: NOT_ENOUGH_DATA" when load_verify_locations is
called with DER-encoded cadata.

Pin openssl to 3.5.5 until the issue is resolved upstream.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Signed-off-by: Luca Miccini <lmiccini@redhat.com>
@openshift-ci

openshift-ci Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign yorabl for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@eduolivares

Copy link
Copy Markdown
Contributor

What this PR changes is already included in
#4042

@eduolivares eduolivares closed this Jul 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants