diff options
| author | Sebastian Andrzej Siewior <sebastian@breakpoint.cc> | 2024-01-30 21:26:16 +0100 |
|---|---|---|
| committer | Alexander Barton <alex@barton.de> | 2024-02-05 13:39:15 +0100 |
| commit | bdb55fb4b322b2c84530855a3b5148a0e387f5b4 (patch) | |
| tree | 56f59138392fd23ad222abc770b86cb7d01cf74c | |
| parent | 79aefe43dd6af2f578e6aae1946078dae5417829 (diff) | |
| download | ngircd-bdb55fb4b322b2c84530855a3b5148a0e387f5b4.tar.gz ngircd-bdb55fb4b322b2c84530855a3b5148a0e387f5b4.zip | |
testsuite: Pass -nameopt to openssl s_client.
The default value for the -nameopt option changed in OpenSSL 3.2 from `oneline' to `utf8'. The `oneline' option also included a space around the fields which is not the case for `utf8'. This means that CN = my.first.domain.tld changed to CN=my.first.domain.tld and is now longer recognized, leading to test failure. This can be fixed by either going back to `oneline' or keeping `utf8' and adding additionally `space_eq'. Anoter way would be to teach the expect that the space is optional. Add explicit -nameopt option with `utf8,space_eq' which is understood by by OpenSSL 3.2 and earlier to make explicit. Remove the wildcard. Signed-off-by: Sebastian Andrzej Siewior <sebastian@breakpoint.cc>
| -rw-r--r-- | src/testsuite/connect-ssl-cert1-test.e | 4 | ||||
| -rw-r--r-- | src/testsuite/connect-ssl-cert2-test.e | 4 |
2 files changed, 4 insertions, 4 deletions
diff --git a/src/testsuite/connect-ssl-cert1-test.e b/src/testsuite/connect-ssl-cert1-test.e index 5eb998b3..69f066eb 100644 --- a/src/testsuite/connect-ssl-cert1-test.e +++ b/src/testsuite/connect-ssl-cert1-test.e @@ -1,10 +1,10 @@ # ngIRCd test suite # Server connect test -spawn openssl s_client -quiet -connect 127.0.0.1:6790 +spawn openssl s_client -quiet -nameopt utf8,space_eq -connect 127.0.0.1:6790 expect { timeout { exit 1 } - "*CN*=*my.first.domain.tld" + "*CN = my.first.domain.tld" } sleep 2 diff --git a/src/testsuite/connect-ssl-cert2-test.e b/src/testsuite/connect-ssl-cert2-test.e index cc10a1ed..cf71d048 100644 --- a/src/testsuite/connect-ssl-cert2-test.e +++ b/src/testsuite/connect-ssl-cert2-test.e @@ -1,10 +1,10 @@ # ngIRCd test suite # Server connect test -spawn openssl s_client -quiet -connect 127.0.0.1:6790 +spawn openssl s_client -quiet -nameopt utf8,space_eq -connect 127.0.0.1:6790 expect { timeout { exit 1 } - "*CN*=*my.second.domain.tld" + "*CN = my.second.domain.tld" } sleep 2 |