test/tls: Using CA extension for generating CA

michael-redpanda · michael-redpanda · commit 03367958df06 · 2025-01-15T09:32:17.000-05:00
More recent versions of OpenSSL requrire CA certificates to have CA:true

Signed-off-by: Michael Boquard &lt;michael@redpanda.com&gt;
diff --git a/tests/unit/CMakeLists.txt b/tests/unit/CMakeLists.txt
@@ -569,7 +569,7 @@ function(seastar_add_certgen name)
     WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
   )
   add_custom_command(OUTPUT "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAROOT}"
-    COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT}
+    COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT} -extensions v3_ca
     DEPENDS "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAPRIVKEY}" "${CMAKE_CURRENT_BINARY_DIR}/${CERT_NAME}.cfg"
     WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
   )

Original file line number	Diff line number	Diff line change
`@@ -569,7 +569,7 @@ function(seastar_add_certgen name)`
`569`	`569`	`WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}`
`570`	`570`	`)`
`571`	`571`	`add_custom_command(OUTPUT "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAROOT}"`
`572`		`- COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT}`
	`572`	`+ COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT} -extensions v3_ca`
`573`	`573`	`DEPENDS "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAPRIVKEY}" "${CMAKE_CURRENT_BINARY_DIR}/${CERT_NAME}.cfg"`
`574`	`574`	`WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}`
`575`	`575`	`)`