functionality stopped working (extra new_oids policy)

Bug #1832822 reported by Gerben
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
openssl (Ubuntu)
Fix Released
Undecided
Unassigned

Bug Description

Unable to generate certificate request targeting new_oids policy.

It used to work on this machine, looks like openssl got updated just few days ago: 12-06-2019

The command and exit result:
gge@itstools-04:~/ssl_ownca/direct_1$ openssl req -new -key direct_1.key -out direct_1.csr -subj '/2.5.4.97=direct_1/O=Sample Direct 1/C=NL/ST=NorthHolland/L=Amsterdam/CN=direct_1.sample.net' problem creating object psd2=2.5.4.97
140648544747968:error:08064066:object identifier routines:OBJ_create:oid exists:../crypto/objects/obj_dat.c:709:
gge@itstools-04:~/ssl_ownca/direct_1$ echo $?
1

No CSR file is produced
(openssl 1.1.1-1ubuntu2.1~18.04.1)

re-playing this on different machines provides correct results:
  fresh unupdated ubuntu-18.04.1-live-server-amd64.iso install: openssl 1.1.0g-2ubuntu4.1
  old unupdated CentOS release 6.10 (Final): openssl-1.0.1e-57.el6.x86_64

ProblemType: Bug
DistroRelease: Ubuntu 18.04
Package: openssl 1.1.1-1ubuntu2.1~18.04.1
ProcVersionSignature: Ubuntu 4.15.0-50.54-generic 4.15.18
Uname: Linux 4.15.0-50-generic x86_64
ApportVersion: 2.20.9-0ubuntu7.6
Architecture: amd64
Date: Fri Jun 14 10:00:10 2019
ProcEnviron:
 LANG=en_US.UTF-8
 SHELL=/bin/bash
 TERM=xterm
 PATH=(custom, no user)
SourcePackage: openssl
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.ssl.openssl.cnf: 2019-06-14T09:29:39.313665

Revision history for this message
Gerben (gerbgeus) wrote :
Revision history for this message
Adrien Nader (adrien) wrote :

I've tried to reproduce on Lunar and got a CSR. I'm going to mark this as Fix Released.

Changed in openssl (Ubuntu):
status: New → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.