diff options
| author | Karen Arutyunov <karen@codesynthesis.com> | 2022-01-28 18:55:32 +0300 |
|---|---|---|
| committer | Karen Arutyunov <karen@codesynthesis.com> | 2022-01-28 18:55:32 +0300 |
| commit | 76678d4186603fda18c929b0f09ca4ea312b72de (patch) | |
| tree | c202bcf10d07f2e9acfb5c407ea445c13563e908 /tests/auth/cert | |
| parent | 7351fd6d811249b9a0db10f1224128aa5fa81b8d (diff) | |
Fix tests failures on i686 for glibc versions prior to 2.34 due to certificates expiration date beyond 2038
Diffstat (limited to 'tests/auth/cert')
| -rwxr-xr-x | tests/auth/cert | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/tests/auth/cert b/tests/auth/cert index 87ec9b5..9355af8 100755 --- a/tests/auth/cert +++ b/tests/auth/cert @@ -4,25 +4,28 @@ # # openssl genrsa 4096 > key.pem -openssl req -x509 -new -key key.pem -days 36500 -config default-openssl.cnf > \ +# Note that for glibc versions prior to 2.34 there is an issue on i686 with +# using certificates with expiration date beyond 2038. +# +openssl req -x509 -new -key key.pem -days 5475 -config default-openssl.cnf > \ default-cert.pem cat default-cert.pem | openssl x509 -sha256 -noout -fingerprint | \ sed -n 's/^SHA256 Fingerprint=\(.*\)$/\1/p' >default-cert-fp -openssl req -x509 -new -key key.pem -days 36500 -config mismatch-openssl.cnf > \ +openssl req -x509 -new -key key.pem -days 5475 -config mismatch-openssl.cnf > \ mismatch-cert.pem -openssl req -x509 -new -key key.pem -days 36500 -config noemail-openssl.cnf > \ +openssl req -x509 -new -key key.pem -days 5475 -config noemail-openssl.cnf > \ noemail-cert.pem -openssl req -x509 -new -key key.pem -days 36500 \ +openssl req -x509 -new -key key.pem -days 5475 \ -config subdomain-openssl.cnf > subdomain-cert.pem -openssl req -x509 -new -key key.pem -days 36500 -config self-openssl.cnf > \ +openssl req -x509 -new -key key.pem -days 5475 -config self-openssl.cnf > \ self-cert.pem -openssl req -x509 -new -key key.pem -days 36500 -config self-any-openssl.cnf > \ +openssl req -x509 -new -key key.pem -days 5475 -config self-any-openssl.cnf > \ self-any-cert.pem # Normally, you have no reason to regenerate expired-cert.pem, as need to keep |