Build failure: step-ca

[Scrumplex]

Steps To Reproduce

Steps to reproduce the behavior:

1. build step-ca

Build log

step-ca> Running phase: checkPhase
step-ca> ok     github.com/smallstep/certificates/acme  3.242s
step-ca> ok     github.com/smallstep/certificates/acme/api      0.144s
step-ca> ok     github.com/smallstep/certificates/acme/db/nosql 0.012s
step-ca> ok     github.com/smallstep/certificates/api   0.397s
step-ca> ok     github.com/smallstep/certificates/api/log       0.002s
step-ca> ok     github.com/smallstep/certificates/api/read      0.004s
step-ca> ok     github.com/smallstep/certificates/api/render    0.002s
step-ca> ok     github.com/smallstep/certificates/authority     0.374s
step-ca> ok     github.com/smallstep/certificates/authority/admin/api   0.015s
step-ca> ok     github.com/smallstep/certificates/authority/admin/db/nosql      0.009s
step-ca> ok     github.com/smallstep/certificates/authority/config      0.007s
step-ca> ok     github.com/smallstep/certificates/authority/internal/constraints        0.005s
step-ca> ok     github.com/smallstep/certificates/authority/policy      0.004s
step-ca> --- FAIL: TestAWS_HardcodedCertificates (0.00s)
step-ca>     aws_test.go:896: assert condition is not true
step-ca> 2024/06/15 09:42:46 http: TLS handshake error from 127.0.0.1:56616: tls: client didn't provide a certificate
step-ca> 2024/06/15 09:42:47 http: TLS handshake error from 127.0.0.1:56624: tls: client didn't provide a certificate
step-ca> FAIL
step-ca> FAIL   github.com/smallstep/certificates/authority/provisioner 12.970s
step-ca> FAIL

Additional context

Notify maintainers

@CMCDragonkai @mohe2015 @techknowlogick

Metadata

Please run nix-shell -p nix-info --run "nix-info -m" and paste the result.

[user@system:~]$ nix-shell -p nix-info --run "nix-info -m"
 - system: `"x86_64-linux"`
 - host os: `Linux 6.9.3-zen1, NixOS, 24.11 (Vicuna), 24.11.20240613.e9ee548`
 - multi-user?: `yes`
 - sandbox: `yes`
 - version: `nix-env (Lix, like Nix) 2.90.0-beta.1`
 - channels(scrumplex): `""`
 - nixpkgs: `/etc/nix/channels/nixpkgs`

---

Add a 👍 reaction to issues you find important.

[milas]

Upstream issue:

• Update hardcoded AWS certs smallstep/certificates#1881

Fix was included in step-ca v0.26.2:

• "Other regions" AWS hardcoded certificate is expired smallstep/certificates#1873

step-ca has already been updated in nixpkgs master:

• step-ca: 0.26.1 -> 0.26.2 #319710

PR progress: https://nixpk.gs/pr-tracker.html?pr=319710

[justinas]

0.26.1 is also the version in 24.05, are there plans to backport #319710 ?

[techknowlogick]

@justinas i just applied the backport label so fingers crossed the bot picks it up soon