@Obihoernchen @ocfmatt can you help us on this?

This seems to be the issue: openssl/openssl#22966

Please test #7482

Thanks for submitting this. Was about to do the same.

This is what i had to do to get the installation working under rocky9.5:

Download the go-xcat tool using wget:

wget https://raw.githubusercontent.com/xcat2/xcat-core/master/xCAT-server/share/xcat/tools/go-xcat -O - >/tmp/go-xcat

chmod +x /tmp/go-xcat

Run the go-xcat tool with the devel option:

/tmp/go-xcat -x devel install

NOTE: This will fail with the certificate issue but carry on with the below.

cp /opt/xcat/share/xcat/ca/openssl.cnf.tmpl /opt/xcat/share/xcat/ca/openssl.cnf.tmpl.orig

vim /opt/xcat/share/xcat/ca/openssl.cnf.tmpl

Comment out anything with authorityKeyIdentifier i.e.:

#authorityKeyIdentifier=keyid,issuer
#authorityKeyIdentifier=keyid,issuer
#authorityKeyIdentifier=keyid:always,issuer
# Only issuerAltName and authorityKeyIdentifier make any sense in a CRL.
#authorityKeyIdentifier=keyid:always
#authorityKeyIdentifier=keyid,issuer

cp /opt/xcat/share/xcat/scripts/setup-dockerhost-cert.sh /opt/xcat/share/xcat/scripts/setup-dockerhost-cert.sh.orig

vim /opt/xcat/share/xcat/scripts/setup-dockerhost-cert.sh

Make the following change:

Comment out:
#openssl req -config ca/openssl.cnf -new -key ca/dockerhost-key.pem -out cert/dockerhost-req.pem -extensions server -subj "/CN=$CNA"

Change to:
openssl req -config ca/openssl.cnf -new -key ca/dockerhost-key.pem -out cert/dockerhost-req.pem -subj "/CN=$CNA"

Source the profile to add xCAT Commands to your path:
source /etc/profile.d/xcat.sh

Reinitialise the xcat installation:
xcatconfig -i -c -s

Check the xCAT version:
lsxcatd -a

Version 2.17.0 (git commit f7e389a0c03fb18f8f1236cb4ad3fe8605765c51, built Mon Jan 13 01:15:40 CET 2025)
This is a Management Node
dbengine=SQLite