Truncate IP address in SAN

[sgallagher]

In OpenSSL 1.1, this was done automatically when addind a SAN extension, but in OpenSSL 3.0 it is rejected as an invalid input.

Signed-off-by: Stephen Gallagher sgallagh@redhat.com

Attn: @mvollmer

[packit-as-a-service[bot]]

Congratulations! One of the builds has completed. :champagne:

You can install the built RPMs by following these steps:

• sudo yum install -y dnf-plugins-core on RHEL 8
• sudo dnf install -y dnf-plugins-core on Fedora
• dnf copr enable packit/sgallagher-sscg-56
• And now you can install the packages.

Please note that the RPMs should be used only in a testing environment.

[mvollmer]

So is the mask used for anything now?

[sgallagher]

So is the mask used for anything now?

Yes, it's still required for the namingConstraints extension, but it's not required (or permitted) for the subjectAlternativeName extension.