mirrors/ngircd
1
0
Fork 0
mirror of https://github.com/osmarks/ngircd.git synced 2025-02-07 21:00:03 +00:00
Code Issues Releases Wiki Activity

testsuite: Pass -nameopt to openssl s_client.

Browse Source 
The default value for the -nameopt option changed in OpenSSL 3.2 from
`oneline' to `utf8'. The `oneline' option also included a space around
the fields which is not the case for `utf8'. This means that
	CN = my.first.domain.tld

changed to

	CN=my.first.domain.tld

and is now longer recognized, leading to test failure.
This can be fixed by either going back to `oneline' or keeping `utf8'
and adding additionally `space_eq'. Anoter way would be to teach the
expect that the space is optional.

Add explicit -nameopt option with `utf8,space_eq' which is understood by
by OpenSSL 3.2 and earlier to make explicit. Remove the wildcard.

Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
This commit is contained in:
Sebastian Andrzej Siewior 2024-01-30 21:26:16 +01:00 committed by Alexander Barton
parent 79aefe43dd
commit bdb55fb4b3
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
src/testsuite/connect-ssl-cert1-test.e
View File

@ -1,10 +1,10 @@
# ngIRCd test suite
# Server connect test
spawn openssl s_client -quiet -connect 127.0.0.1:6790
spawn openssl s_client -quiet -nameopt utf8,space_eq -connect 127.0.0.1:6790
expect {
timeout { exit 1 }
"*CN*=*my.first.domain.tld"
"*CN = my.first.domain.tld"
}
sleep 2

4
src/testsuite/connect-ssl-cert2-test.e
View File

@ -1,10 +1,10 @@
# ngIRCd test suite
# Server connect test
spawn openssl s_client -quiet -connect 127.0.0.1:6790
spawn openssl s_client -quiet -nameopt utf8,space_eq -connect 127.0.0.1:6790
expect {
timeout { exit 1 }
"*CN*=*my.second.domain.tld"
"*CN = my.second.domain.tld"
}
sleep 2