Fix OpenSSL genpkey parameter formatting for SSL certificate generation

[ngetahun]

Summary

Fixes the OpenSSL genpkey command parameter formatting that was causing SSL certificate generation to fail during the RMT wizard setup.

Problem

The OpenQA test reported the following error:

Error setting rsa_keygen_bits: 2048 parameter

This was caused by incorrect parameter formatting in the -pkeyopt argument. The parameter rsa_keygen_bits: 2048 had a space after the colon, but OpenSSL expects rsa_keygen_bits:2048 (no space).

Root Cause

This issue was introduced in commit 0b73535 when migrating from genrsa to genpkey for FIPS compatibility (bsc#1235462).

Changes

• Fixed the -pkeyopt parameter in certificate_generator.rb (removed space after colon)
• Updated the corresponding test expectation in certificate_generator_spec.rb
• Added changelog entry referencing bsc#1266671

Testing

Verified the fix with OpenSSL command line:

# Correct syntax (no space) - works ✓
openssl genpkey -algorithm RSA -pass stdin -aes256 \
  -out /tmp/test.key -pkeyopt rsa_keygen_bits:2048

# Incorrect syntax (with space) - fails ✗
openssl genpkey -algorithm RSA -pkeyopt "rsa_keygen_bits: 2048" \
  -out /tmp/test.key
# Error: genpkey: Error setting rsa_keygen_bits: 2048 parameter

References

• Fixes: bsc#1266671
• Related: bsc#1235462 (FIPS compatibility)
• OpenQA failure: https://openqa.suse.de/tests/22540520#step/rmt_feature/20

[coveralls]

Coverage Report for CI Build 26746178175

Coverage remained the same at 98.499%

Details

• Coverage remained the same as the base build.
• Patch coverage: No coverable lines changed in this PR.
• No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.

---

Coverage Stats

Relevant Lines:	1666
Covered Lines:	1641
Line Coverage:	98.5%
Coverage Strength:	1.97 hits per line

---

💛 - Coveralls

[brett060102]

LGTM

[rtamalin]

LGTM

[felixsch]

lgtm 👍