From a36dedb35a8c0654d6bd64e90015bfc2b0a4359f Mon Sep 17 00:00:00 2001
From: Lightning <lightning@lightning-online.de>
Date: Wed, 5 Jun 2024 13:58:49 +0200
Subject: [PATCH] add section "v3_req" to openssl_ca.cnf.epp

puppet/openssl v3.1.0 always tries to load this section
---
 spec/classes/ds389_spec.rb   | 2 ++
 templates/openssl_ca.cnf.epp | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/spec/classes/ds389_spec.rb b/spec/classes/ds389_spec.rb
index 938df7c..1275731 100644
--- a/spec/classes/ds389_spec.rb
+++ b/spec/classes/ds389_spec.rb
@@ -18,6 +18,8 @@
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints = CA:true
+
+[ v3_req ]
 '
   end
 
diff --git a/templates/openssl_ca.cnf.epp b/templates/openssl_ca.cnf.epp
index 1a6734f..fbfcc12 100644
--- a/templates/openssl_ca.cnf.epp
+++ b/templates/openssl_ca.cnf.epp
@@ -13,3 +13,5 @@ CN = <%= $cn %>
 subjectKeyIdentifier = hash
 authorityKeyIdentifier = keyid:always,issuer:always
 basicConstraints = CA:true
+
+[ v3_req ]