Skip to content

[18.0-fr6] Use both ssl pin commits#4042

Merged
openshift-merge-bot[bot] merged 2 commits into
openstack-k8s-operators:18.0-fr6from
openshift-cherrypick-robot:cherry-pick-4040-to-18.0-fr6
Jul 8, 2026
Merged

[18.0-fr6] Use both ssl pin commits#4042
openshift-merge-bot[bot] merged 2 commits into
openstack-k8s-operators:18.0-fr6from
openshift-cherrypick-robot:cherry-pick-4040-to-18.0-fr6

Conversation

@openshift-cherrypick-robot

Copy link
Copy Markdown

This is an automated cherry-pick of #4040

/assign eduolivares

rabi and others added 2 commits July 8, 2026 08:41
Change-Id: Ib0b1f31c59984dcac63f72199ccbe3180df3dd9f
Signed-off-by: rabi <ramishra@redhat.com>
OpenSSL >= 3.5.6 introduced strict DER validation that rejects some
real-world CA root certificates with non-standard encoding
(openssl/openssl#25023). This causes Ansible 2.15's url lookup plugin
to fail with "ASN1: NOT_ENOUGH_DATA" when load_verify_locations is
called with DER-encoded cadata.

Pin openssl to 3.5.5 until the issue is resolved upstream.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Signed-off-by: Luca Miccini <lmiccini@redhat.com>

@evallesp evallesp left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm

@Valkyrie00 Valkyrie00 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/approve

@openshift-ci

openshift-ci Bot commented Jul 8, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: Valkyrie00

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved label Jul 8, 2026
@openshift-merge-bot openshift-merge-bot Bot merged commit 3db5d9f into openstack-k8s-operators:18.0-fr6 Jul 8, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants