You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
32 lines
1.2 KiB
32 lines
1.2 KiB
2 years ago
|
From 05fd14aea7eff2a6911a6f529f1237276482c6e7 Mon Sep 17 00:00:00 2001
|
||
|
|
From: Kazuki Yamaguchi <k@rhe.jp>
|
||
|
|
Date: Fri, 10 Jul 2020 13:56:38 +0900
|
||
|
|
Subject: [PATCH] test/openssl/test_ssl: relax regex to match OpenSSL's error
|
||
|
|
message
|
||
|
|
|
||
|
|
OpenSSL 3.0 slightly changed the error message for a certificate
|
||
|
|
verification failure when an untrusted self-signed certificate is found
|
||
|
|
in the chain.
|
||
|
|
---
|
||
|
|
test/openssl/test_ssl.rb | 4 +++-
|
||
|
|
1 file changed, 3 insertions(+), 1 deletion(-)
|
||
|
|
|
||
|
|
diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb
|
||
|
|
index 6095d545b5..9e9b8b9b69 100644
|
||
|
|
--- a/test/openssl/test_ssl.rb
|
||
|
|
+++ b/test/openssl/test_ssl.rb
|
||
|
|
@@ -964,7 +964,9 @@ def test_connect_certificate_verify_failed_exception_message
|
||
|
|
start_server(ignore_listener_error: true) { |port|
|
||
|
|
ctx = OpenSSL::SSL::SSLContext.new
|
||
|
|
ctx.set_params
|
||
|
|
- assert_raise_with_message(OpenSSL::SSL::SSLError, /self signed/) {
|
||
|
|
+ # OpenSSL <= 1.1.0: "self signed certificate in certificate chain"
|
||
|
|
+ # OpenSSL >= 3.0.0: "self-signed certificate in certificate chain"
|
||
|
|
+ assert_raise_with_message(OpenSSL::SSL::SSLError, /self.signed/) {
|
||
|
|
server_connect(port, ctx)
|
||
|
|
}
|
||
|
|
}
|
||
|
|
--
|
||
|
|
2.32.0
|
||
|
|
|