make check error

[gilweis]

Ubuntu 25.10
OpenSSL 3.5.3 16 Sep 2025 (Library: OpenSSL 3.5.3 16 Sep 2025)
easy-rsa 3.2.2
softhsm2 2.6.1

The error:
$make check
...
Using Easy-RSA configuration:

• undefined
  cp subca.vars subca.pki/vars
  touch subca.pki/.rnd
  cat "./oids.cnf" >> subca.pki/openssl-easyrsa.cnf
  sed -i '1i oid_section = oids' subca.pki/openssl-easyrsa.cnf
  /usr/share/easy-rsa/easyrsa --pki-dir=subca.pki build-ca nopass subca
  Using Easy-RSA 'vars' configuration:
• subca.pki/vars

Easy-RSA error:

This openssl config file does not support X509-type 'ca'.

• subca.pki/openssl-easyrsa.cnf

Please update 'openssl-easyrsa.cnf' to the latest Easy-RSA release.

EasyRSA Version Information
Version: 3.2.2
Generated: Sat Feb 1 07:22:55 CST 2025
SSL Lib: OpenSSL 3.5.3 16 Sep 2025 (Library: OpenSSL 3.5.3 16 Sep 2025)
Git Commit: 8de63429e6c70e4c573aad291fb0ca3cdba763bd
Source Repo: https://github.com/OpenVPN/easy-rsa
Host: 3.2.2 | nix | Linux | /bin/bash
make[3]: *** [Makefile:526: built.subca] Error 1
make[3]: Leaving directory '/home/g/mycms/test/ca'
make[2]: *** [Makefile:378: check-am] Error 2
make[2]: Leaving directory '/home/g/mycms/test/ca'
make[1]: *** [Makefile:385: check-recursive] Error 1
make[1]: Leaving directory '/home/g/mycms/test'
make: *** [Makefile:571: check-recursive] Error 1

[gilweis]

Easy-RSA 3 ChangeLog:
Branch-merge: v3.2.0-beta1 (#1046) 2023/12/15 Commit: 7120876

• Important note: As of Easy-RSA version 3.2.0-beta1, the configuration files
  vars.example, openssl-easyrsa.cnf and all files in x509-types directory
  are no longer required. Package maintainers can omit these files in the future.
  All files are created as required and deleted upon command completion.
  vars.example is created during init-pki and placed in the fresh PKI.
  These files will be retained for downstream packaging compatibility.

[alonbl]

Patches will be welcomed.... as far as I can see the rewrite of the easy-rsa has "forgot" to allow adding oids to the openssl configuration file.

Once you have a sequence that works to build the environment, I will be happy to embed it into the build.

[alonbl]

fixed in #16