From 75d88b5fd89655b8c3ac2a385a5ac2f8dea560e5 Mon Sep 17 00:00:00 2001
From: "Richard W.M. Jones" <rjones@redhat.com>
Date: Tue, 29 Jun 2021 15:29:11 +0100
Subject: [PATCH] RHEL: Create /etc/crypto-policies/back-ends/opensslcnf.config

https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13
---
 appliance/init | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/appliance/init b/appliance/init
index b1c4d09ea..be46f9648 100755
--- a/appliance/init
+++ b/appliance/init
@@ -70,6 +70,14 @@ if ! test -e /etc/mtab; then
   ln -s /proc/mounts /etc/mtab
 fi
 
+# openssl 3 requires /etc/crypto-policies/back-ends/opensslcnf.config
+# to exist, but it is created in a %post script in crypto-policies
+# https://bugzilla.redhat.com/show_bug.cgi?id=1977214#c13
+if ! test -r /etc/crypto-policies/back-ends/opensslcnf.config &&
+     test -f /usr/share/crypto-policies/DEFAULT/opensslcnf.txt; then
+  ln -s /usr/share/crypto-policies/DEFAULT/opensslcnf.txt /etc/crypto-policies/back-ends/opensslcnf.config
+fi
+
 # devtmpfs is required since udev 176
 mount -t devtmpfs /dev /dev
 mkdir -p /dev/pts
-- 
2.31.1