| Ruby 3.0 ships ruby-openssl 3.0, which support Ed25519 through the generic OpenSSL::PKey::PKey interface. Puppet 7.14.0 fails with Ed25519 agent certificate/key:
Error: Unsupported key 'OpenSSL::PKey::PKey'
|
The reason for this is a check in lib/puppet/x509/cert_provider.rb, which checks for specific key types preventing the generic key type support from working. Simply removing the check is sufficient. |