* Fix regression introduced in 4.0.1 that prevented writing multiple certificate types to the same output file.
* Don't truncate destination files until just prior to writing.
* Use int type for POPT_ARG_NONE values to fix a bug on s390x.
* Don't crash when passed a hostname without a dot (such as localhost)
Related: RHEL-124447
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
This was removed upstream in 4.0, but for backwards-compatibility in
RHEL, it will continue to be created.
Related: RHEL-124447
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
- Support for ML-DSA keys for post-quantum cryptography (PQC) when built
against OpenSSL 3.5 or later
- Support for EC-DSA keys for elliptic curves
- RSA certificate authority is now created with a minimum key strength
of 4096 bits
- Improved --help output
- Deprecated support for generating custom DH parameters
- Stopped producing the DH parameter file by default (it may be
requested explicitly with the --dhparams-file argument)
- Minimum OpenSSL version is now 3.0
- Drop upstreamed patches
Resolves: RHEL-123675
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
RFC 2986 only defines a single version for CSRs: X509_VERSION_1 (0).
OpenSSL starting with 3.4 rejects everything else.
Use X509_VERSION_1 as version for X509_REQ_set_version.
Resolves: RHEL-85851
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
Support for OpenSSL 3.0
Support for outputting named Diffie-Hellman parameter groups
Support for CentOS Stream 9
Resolves: rhbz#1984468
Signed-off-by: Stephen Gallagher <sgallagh@redhat.com>
