test/tls: Using CA extension for generating CA

michael-redpanda · michael-redpanda · commit 1744b664e18e · 2024-12-06T14:01:29.000-05:00
More recent versions of OpenSSL requrire CA certificates to have CA:true

Signed-off-by: Michael Boquard &lt;michael@redpanda.com&gt;
diff --git a/tests/unit/CMakeLists.txt b/tests/unit/CMakeLists.txt
@@ -563,7 +563,7 @@ function(seastar_add_certgen name)
     WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
   )
   add_custom_command(OUTPUT "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAROOT}"
-    COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT}
+    COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT} -extensions v3_ca
     DEPENDS "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAPRIVKEY}" "${CMAKE_CURRENT_BINARY_DIR}/${CERT_NAME}.cfg"
     WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}
   )

Original file line number	Diff line number	Diff line change
`@@ -563,7 +563,7 @@ function(seastar_add_certgen name)`
`563`	`563`	`WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}`
`564`	`564`	`)`
`565`	`565`	`add_custom_command(OUTPUT "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAROOT}"`
`566`		`- COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT}`
	`566`	`+ COMMAND ${OPENSSL} req -x509 -new -nodes -key ${CERT_CAPRIVKEY} -days ${CERT_DAYS} -config ${CERT_NAME}.cfg -out ${CERT_CAROOT} -extensions v3_ca`
`567`	`567`	`DEPENDS "${CMAKE_CURRENT_BINARY_DIR}/${CERT_CAPRIVKEY}" "${CMAKE_CURRENT_BINARY_DIR}/${CERT_NAME}.cfg"`
`568`	`568`	`WORKING_DIRECTORY ${CMAKE_CURRENT_BINARY_DIR}`
`569`	`569`	`)`