)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"change_message_id":"a2c455d96740e764b08afa627a25e257ccf785c7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"991ec43d_2ee30d5b","updated":"2026-10-18 06:53:56.000000000","message":"The script no longer works with LibreSSL (I had 3.7.3 installed FWIW).","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"change_message_id":"d86f8d104ec24d4d3037a086a9873f0838d77dce","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"eff15c1f_016b4eef","in_reply_to":"5024d5e2_d7545ba0","updated":"2026-10-18 13:06:30.000000000","message":"Fair enough, if LibreSSL doesn\u0027t matter here I\u0027ll just +2 this and we\u0027ll move on. 😀","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"change_message_id":"8b2a22b0dd273e488ed97fe5c986f5d610c5e7d8","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"5024d5e2_d7545ba0","in_reply_to":"59dad6e6_924ef83c","updated":"2026-10-18 13:05:15.000000000","message":"Oh, sorry, missed your comments because the gerrit UI didn\u0027t refresh (or I didn\u0027t). But that fix diff seems to not be the right diff? I can see that leaving the counting serial in as a fallback would work, but I think we should not let libressl hold us back.","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"change_message_id":"47cf02694c71881bef0dbe5df2b54f1413d334eb","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"92deea0e_04c77019","in_reply_to":"65c97868_564eda6a","updated":"2026-10-18 12:23:36.000000000","message":"One fix seems to be:\n\n```\n--- a/sample/sample-keys/openssl.cnf\n+++ b/sample/sample-keys/openssl.cnf\n@@ -15,6 +15,7 @@ new_certs_dir \u003d $dir                  # default place for new certs.\n\n certificate    \u003d $dir/ca.crt           # The CA certificate\n serial         \u003d $dir/serial           # The current serial number\n+rand_serial    \u003d yes                   # Use random serial numbers\n crl            \u003d $dir/crl.pem          # The current CRL\n private_key    \u003d $dir/ca.key           # The private key\n RANDFILE       \u003d $dir/.rand            # private random number file\n```","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"change_message_id":"7a3ad3ce34f1705082eeb83d9376704c6c7b6e9c","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"e0fa1754_5ae0395b","in_reply_to":"991ec43d_2ee30d5b","updated":"2026-10-18 12:07:24.000000000","message":"I don\u0027t think we need to support LibreSSL for generating the sample certs. We regenerate them every now and then, and can do that just fine using OpenSSL.\n\nThat said, do you have the error message? It might be a quick fix.","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000035,"name":"Steffan Karger","display_name":"Steffan Karger","email":"steffan@karger.me","username":"syzzer","status":"Commits and comments are my own views, not those of my employer."},"change_message_id":"5ebe0faa02a6c723cc2c16326dd33b87064d0ba7","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"59dad6e6_924ef83c","in_reply_to":"e0fa1754_5ae0395b","updated":"2026-10-18 13:01:12.000000000","message":"It turns out LibreSSL doesn\u0027t support random serials at all. This pretending to be openssl-compatible, but not actually keeping up is somewhat annoying. I think we should just ignore libressl here.","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"},{"author":{"_account_id":1000053,"name":"Răzvan Cojocaru","display_name":"Razvan Cojocaru","email":"razvanc@mailbox.org","username":"razvanc"},"change_message_id":"ea48197b75547200d97eb84274d51516c2b99d9c","unresolved":true,"context_lines":[],"source_content_type":"","patch_set":1,"id":"65c97868_564eda6a","in_reply_to":"e0fa1754_5ae0395b","updated":"2026-10-18 12:15:31.000000000","message":"```\nopenssl ca -batch -config openssl.cnf -extensions server -out sample-ca/server.crt -in sample-ca/server.csr\nUsing configuration from openssl.cnf\nvariable lookup failed for CA_default::serial\n140133332040520:error:02FFF002:system library:func(4095):No such file or directory:bio/bss_file.c:124:fopen(\u0027sample-ca/index.txt.attr\u0027, \u0027rb\u0027)\n140133332040520:error:20FFF080:BIO routines:CRYPTO_internal:no such file:bio/bss_file.c:127:\n140133332040520:error:0EFFF072:configuration file routines:CRYPTO_internal:no such file:conf/conf_def.c:200:\n140133332040520:error:0EFFF06C:configuration file routines:CRYPTO_internal:no value:conf/conf_lib.c:322:group\u003dCA_default name\u003demail_in_dn\n140133332040520:error:0EFFF06C:configuration file routines:CRYPTO_internal:no value:conf/conf_lib.c:322:group\u003dCA_default name\u003dserial\n```","commit_id":"b2d31a2fa8b5ae6544ba75ab3a7c8111c51c3390"}]}