```
certtool.exe --generate-privkey --outfile private.key
```

A response similar to this one should be displayed:

```
Generating a 3072 bit RSA private key...
```

#### 3.3.3 Generate a public certificate

Create a file called `cert.cnf` with the content below. This file contains all of the information necessary to generate a certificate using `certtool.exe`:

```
# X.509 Certificate options

   * safely be included in XML document as an attribute value. See section <a
   * href="http://www.w3.org/TR/2008/REC-xml-20081126/#AVNormalize">3.3.3</a> of the XML
   * specification.
   *
   * <p>This escaper substitutes {@code 0xFFFD} for non-whitespace control characters and the
   * character values {@code 0xFFFE} and {@code 0xFFFF} which are not permitted in XML. For more

  integrity sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==

nanoid@3.3.3:
  version "3.3.3"
  resolved "https://registry.yarnpkg.com/nanoid/-/nanoid-3.3.3.tgz#fd8e8b7aa761fe807dba2d1b98fb7241bb724a25"
  integrity sha512-p1sjXuopFs0xg+fPASzQ28agW1oHD7xDsd9Xkf3T15H3c/cifrFHVwrh74PdoklAPi+i7MdRsE47vm2r6JoB+w==

negotiator@0.6.3:

    /**
     * @throws Exception
     */
    @Test
    public void testCopy_BeanToBean() throws Exception {
        final MyClass src = new MyClass();
        src.setAaa("111");
        src.setCcc("333");

        final MyClass2 dest = new MyClass2();
        dest.setAaa("aaa");
        dest.setBbb("bbb");
        dest.setDdd("ddd");

        BeanUtil.copyBeanToBean(src, dest);

           * within a `try` block, then an error might be thrown even before we enter the `try`
           * block: https://github.com/google/truth/issues/333#issuecomment-765652454
           *
           * Also, it's nice that this approach should let us catch *only* ClassNotFoundException
           * instead of having to catch more broadly (potentially even including, say, a

    maintainers:
    - email: ******@****.***
      name: MinIO, Inc
    name: minio
    sources:
    - https://github.com/minio/minio
    urls:
    - https://charts.min.io/helm-releases/minio-3.3.3.tgz
    version: 3.3.3
  - apiVersion: v1
    appVersion: RELEASE.2021-12-10T23-03-39Z
    created: "2025-01-02T21:34:24.995166842-08:00"
    description: Multi-Cloud Object Storage

pkg syscall (darwin-386), const SYS___OLD_SEMWAIT_SIGNAL = 370
pkg syscall (darwin-386), const SYS___OLD_SEMWAIT_SIGNAL_NOCANCEL = 371
pkg syscall (darwin-386), const SYS___PTHREAD_CANCELED = 333
pkg syscall (darwin-386), const SYS___PTHREAD_CHDIR = 348
pkg syscall (darwin-386), const SYS___PTHREAD_FCHDIR = 349
pkg syscall (darwin-386), const SYS___PTHREAD_KILL = 328

pkg syscall (freebsd-arm64), const SYS_SCHED_GET_PRIORITY_MAX = 332
pkg syscall (freebsd-arm64), const SYS_SCHED_GET_PRIORITY_MAX ideal-int
pkg syscall (freebsd-arm64), const SYS_SCHED_GET_PRIORITY_MIN = 333
pkg syscall (freebsd-arm64), const SYS_SCHED_GET_PRIORITY_MIN ideal-int
pkg syscall (freebsd-arm64), const SYS_SCHED_GETPARAM = 328
pkg syscall (freebsd-arm64), const SYS_SCHED_GETPARAM ideal-int

pkg syscall (darwin-arm64), const SYS___OLD_SEMWAIT_SIGNAL_NOCANCEL = 371
pkg syscall (darwin-arm64), const SYS___OLD_SEMWAIT_SIGNAL_NOCANCEL ideal-int
pkg syscall (darwin-arm64), const SYS___PTHREAD_CANCELED = 333
pkg syscall (darwin-arm64), const SYS___PTHREAD_CANCELED ideal-int
pkg syscall (darwin-arm64), const SYS___PTHREAD_CHDIR = 348
pkg syscall (darwin-arm64), const SYS___PTHREAD_CHDIR ideal-int

**Affected Versions**:
  - kube-apiserver v1.31.0 - v1.31.11
  - kube-apiserver v1.32.0 - v1.32.7
  - kube-apiserver v1.33.0 - v1.33.3

**Fixed Versions**:
  - kube-apiserver v1.31.12
  - kube-apiserver v1.32.8
  - kube-apiserver v1.33.4

This vulnerability was reported by Paul Viossat.