initramfs: T5824: Added openssl.cnf to initramfs

[zdc]

Change Summary

Added openssl.cnf to initramfs

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Code style update (formatting, renaming)
• Refactoring (no functional changes)
• Migration from an old Vyatta component to vyos-1x, please link to related PR inside obsoleted component
• Other (please describe):

Related Task(s)

• https://vyos.dev/T5824

Component(s) name

initramfs, openssl, busybox

Proposed changes

Without openssl.cnf software that uses libssl (for example busybox) has issues with connections to some HTTPS servers.

How to test

Boot to initramfs and use wget command to fetch data from HTTPS servers with specific security settings.

(initramfs) busybox wget https://.../

Without config, a server can reset the connection:

wget: TLS error from peer (alert code 40): handshake failure
wget: error getting response: Connection reset by peer

Checklist:

• I have read the CONTRIBUTING document
• I have linked this PR to one or more Phabricator Task(s)
• My commit headlines contain a valid Task id
• My change requires a change to the documentation
• I have updated the documentation accordingly

[c-po]

@Mergifyio backport sagitta

[mergify]

backport sagitta

✅ Backports have been created

• #470 initramfs: T5824: Added openssl.cnf to initramfs (backport #469) has been created for branch sagitta

[c-po]

@Mergifyio backport equuleus

[mergify]

backport equuleus

✅ Backports have been created

• #471 initramfs: T5824: Added openssl.cnf to initramfs (backport #469) has been created for branch equuleus