From 78fc23138a06d5db53a23e6b11b7f3e3e6f6efc5 Mon Sep 17 00:00:00 2001
From: Seth Foster <fosterseth@users.noreply.github.com>
Date: Fri, 26 Apr 2024 12:29:22 -0400
Subject: [PATCH] Pin openssl 3.0.7 (#15147)

followup to PR #15142

This commit pins openssl in the awx image,
not just the builder image.
---
 tools/ansible/roles/dockerfile/templates/Dockerfile.j2 | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tools/ansible/roles/dockerfile/templates/Dockerfile.j2 b/tools/ansible/roles/dockerfile/templates/Dockerfile.j2
index 41ec0fac28..98e8f2a577 100644
--- a/tools/ansible/roles/dockerfile/templates/Dockerfile.j2
+++ b/tools/ansible/roles/dockerfile/templates/Dockerfile.j2
@@ -36,6 +36,7 @@ RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
 {% endif %}
     nss \
     openldap-devel \
+    # pin to older openssl, see jira AAP-23449
     openssl-3.0.7 \
     patch \
     postgresql \
@@ -121,6 +122,8 @@ RUN dnf -y update && dnf install -y 'dnf-command(config-manager)' && \
     krb5-workstation \
     nginx \
     "openldap >= 2.6.2-3" \
+    # pin to older openssl, see jira AAP-23449
+    openssl-3.0.7 \
     postgresql \
     python3.11 \
     "python3.11-devel" \