- Certificate format validation when adding the SCEP server's CA
(#1492112)
- Replace some SHA1 usages with SHA256 in the unit tests needed
becaus of OpenSSL 3 update
Resolves: #1492112
- Certmonger SCEP renewal should not use old challenges (#1990926)
- Certmonger certificates stuck in NEED_GUIDANCE (#2001082)
- certmonger creates CSRs with invalid DER syntax for X509v3 extensions
with critical=FALSE (#2012261)
- Re-enable 003-csrgen test
Resolves: #1990926, #2001082, #2012261
Tier0 tests were part of RHEL8 which were
not added in RHEL9 in following
commit 96aed6bf63
Now added with this change which will execute
the tier0 tests in osci
Related: rhbz#1947473
Signed-off-by: Kaleemullah Siddiqui <ksiddiqu@redhat.com>
This patch was provided upstream by the OpenStack team for
TLS-Everywhere support.
This changes the ciphers used when creating PKCS#12 files.
Resolves: #1954618
