openssl update may have broken puppet cert sign

[Alex Muntada]

After tonight's openssl update on our puppet CA server, we can no longer sign puppet certificates:

root@sistemes:~# puppet cert sign vm-host-14.ac.upc.es
Notice: Signed certificate request for vm-host-14.ac.upc.es
Error:
root@sistemes:~# puppet ca sign vm-host-14.ac.upc.es
Notice: Signed certificate request for vm-host-14.ac.upc.es
Error:
Error: Try 'puppet help ca sign' for usage

AFAICT, no other changes on the puppet CA have been performed.

ProblemType: Bug
DistroRelease: Ubuntu 14.04
Package: openssl 1.0.1f-1ubuntu2.20
ProcVersionSignature: Ubuntu 3.13.0-96.143-generic 3.13.11-ckt39
Uname: Linux 3.13.0-96-generic x86_64
ApportVersion: 2.14.1-0ubuntu3.21
Architecture: amd64
Date: Fri Sep 23 13:41:12 2016
InstallationDate: Installed on 2010-05-25 (2313 days ago)
InstallationMedia: Ubuntu-Server 10.04 LTS "Lucid Lynx" - Release amd64 (20100427)
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: openssl
UpgradeStatus: Upgraded to trusty on 2015-02-05 (596 days ago)

[Marc Deslauriers (mdeslaur)]

This may be caused by the same issue as bug 1626883.

Updated openssl packages are being built now and will be released as a regression fix today.

[Alex Muntada (alex.muntada)]

After downgrading to 1.0.1f-1ubuntu2.19, "puppet cert sign ..." works again.

[Sebastian Nohn (sebastian-nohn)]

See #1626883