Skip to content

fix(rust-openssl): backport re-mint of expired X.509 test fixtures #18480

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Thien Trung Vuong (trungams) wants to merge 1 commit into
base: 4.0
Choose a base branch
from
Open

fix(rust-openssl): backport re-mint of expired X.509 test fixtures #18480

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
1 change: 0 additions & 1 deletion base/comps/components.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5692,7 +5692,6 @@ overlay-files = ["overlays/*.overlay.toml"]
[components.rust-opener]
[components.rust-openpgp-cert-d]
[components.rust-openssh-keys]
[components.rust-openssl]
[components.rust-openssl-kdf]
[components.rust-openssl-macros]
[components.rust-openssl-probe]
Expand Down
389 changes: 389 additions & 0 deletions base/comps/rust-openssl/0001-Re-mint-expired-X.509-test-fixtures.patch
View file
Open in desktop

Large diffs are not rendered by default.

19 changes: 19 additions & 0 deletions base/comps/rust-openssl/overlays/0001-remint-expired-x509-test-fixtures.overlay.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
[metadata]
category = "upstream-backport"
upstream-status = "upstreamed"
commits = [
{ url = "https://github.com/sfackler/rust-openssl/commit/10bbf71be84742fad3f9f782f282e48aa3ba389a" },
]
bugs = [
{ url = "https://github.com/sfackler/rust-openssl/pull/2669" },
]

# The bundled X.509 test fixtures (leaf/intermediate-ca/root-ca/cert) expired on
# 2026-08-11/12, so test_set_purpose and test_verify_param_set_depth fail in %check
# on any build after that date. Fixed upstream after the 0.10.75 release by re-minting
# the fixtures (notAfter -> 2037-12-31) and updating the derived assertions. Drop this
# overlay once we move to a rust-openssl release that includes the fix.
[[overlays]]
description = "Backport upstream re-mint of expired X.509 test fixtures"
type = "patch-add"
source = "../0001-Re-mint-expired-X.509-test-fixtures.patch"
1 change: 1 addition & 0 deletions base/comps/rust-openssl/rust-openssl.comp.toml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1 @@
[components.rust-openssl]
2 changes: 1 addition & 1 deletion locks/rust-openssl.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,5 +2,5 @@
version = 1
import-commit = 'af3b218f028b42f3ffbeee90685a0395113ee2e0'
upstream-commit = 'af3b218f028b42f3ffbeee90685a0395113ee2e0'
input-fingerprint = 'sha256:83dc2eecf2014f992456699413e249db049468551b44a43b33f73093f6b6d900'
input-fingerprint = 'sha256:fbcd2c6a511878e6d800b4618360f6889275afc2fb640f8b6d2f6d7277b356f3'
resolution-input-hash = 'sha256:466421704711c4fd3c71f0b2ed715a0e61d49e3e26f3a2637fee755795849c8e'
389 changes: 389 additions & 0 deletions specs/r/rust-openssl/0001-Re-mint-expired-X.509-test-fixtures.patch
View file
Open in desktop

Large diffs are not rendered by default.

6 changes: 5 additions & 1 deletion specs/r/rust-openssl/rust-openssl.spec
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
## (rpmautospec version 0.8.3)
## RPMAUTOSPEC: autorelease, autochangelog
%define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
release_number = 3;
release_number = 4;
base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
print(release_number + base_release_number - 1);
}%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
Expand Down Expand Up @@ -39,6 +39,7 @@ BuildRequires: cargo-rpm-macros >= 24
%global _description %{expand:
OpenSSL bindings.}

Patch3: 0001-Re-mint-expired-X.509-test-fixtures.patch
%description %{_description}

%package devel
Expand Down Expand Up @@ -153,6 +154,9 @@ use the "v111" feature of the "%{crate}" crate.

%changelog
## START: Generated by rpmautospec
* Mon Aug 17 2026 Thien Trung Vuong <tvuong@microsoft.com> - 0.10.75-4
- fix(rust-openssl): backport re-mint of expired X.509 test fixtures

* Thu Apr 30 2026 Daniel McIlvaney <damcilva@microsoft.com> - 0.10.75-3
- feat: introduce deterministic commit resolution via Azure Linux lock file

Expand Down
Loading