{"record":{"id":"f91dfb6ab9934a0c","repo":"puppetlabs/puppet","slug":"cannot-create-csr-with-attribute-oid-message","errorCode":null,"errorMessage":"Cannot create CSR with attribute %{oid}: %{message}","messagePattern":"Cannot create CSR with attribute %(.+?): %(.+?)","errorType":"exception","errorClass":"Puppet::Error","httpStatus":null,"severity":"error","filePath":"lib/puppet/ssl/certificate_request.rb","lineNumber":227,"sourceCode":"  # we need to prevent that field from being written to directly.\n  PRIVATE_CSR_ATTRIBUTES = [\n    'extReq',   '1.2.840.113549.1.9.14',\n    'msExtReq', '1.3.6.1.4.1.311.2.1.14'\n  ]\n\n  def add_csr_attributes(csr, csr_attributes)\n    csr_attributes.each do |oid, value|\n      if PRIVATE_CSR_ATTRIBUTES.include? oid\n        raise ArgumentError, _(\"Cannot specify CSR attribute %{oid}: conflicts with internally used CSR attribute\") % { oid: oid }\n      end\n\n      encoded = OpenSSL::ASN1::PrintableString.new(value.to_s)\n\n      attr_set = OpenSSL::ASN1::Set.new([encoded])\n      csr.add_attribute(OpenSSL::X509::Attribute.new(oid, attr_set))\n      Puppet.debug(\"Added csr attribute: #{oid} => #{attr_set.inspect}\")\n    rescue OpenSSL::X509::AttributeError => e\n      raise Puppet::Error, _(\"Cannot create CSR with attribute %{oid}: %{message}\") % { oid: oid, message: e.message }, e.backtrace\n    end\n  end\n\n  PRIVATE_EXTENSIONS = [\n    'subjectAltName', '2.5.29.17'\n  ]\n\n  # @api private\n  def extension_request_attribute(options)\n    extensions = []\n\n    if options[:extension_requests]\n      options[:extension_requests].each_pair do |oid, value|\n        if PRIVATE_EXTENSIONS.include? oid\n          raise Puppet::Error, _(\"Cannot specify CSR extension request %{oid}: conflicts with internally used extension request\") % { oid: oid }\n        end\n\n        ext = OpenSSL::X509::Extension.new(oid, OpenSSL::ASN1::UTF8String.new(value.to_s).to_der, false)","sourceCodeStart":209,"sourceCodeEnd":245,"githubUrl":"https://github.com/puppetlabs/puppet/blob/e227c27540975c25aa22d533a52424a9d2fc886a/lib/puppet/ssl/certificate_request.rb#L209-L245","documentation":"Error \"Cannot create CSR with attribute %{oid}: %{message}\" thrown in puppetlabs/puppet.","triggerScenarios":"Thrown at lib/puppet/ssl/certificate_request.rb:227 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":[],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"e227c27540975c25aa22d533a52424a9d2fc886a","analyzedAt":"2026-08-21T20:49:46.650Z","schemaVersion":2},"datasetVersion":"2026-08-21T23:17:16.201Z"}