Changeset 10d9053 in mod_gnutls for test/server.template.in

Timestamp:

Jan 8, 2017, 9:00:28 AM (3 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, proxy-ticket, upstream

Children:

0202d6b

Parents:

0a12ff8

git-author:

Thomas Klute <thomas2.klute@…> (01/08/17 08:18:56)

git-committer:

Thomas Klute <thomas2.klute@…> (01/08/17 09:00:28)

Message:

Test suite, gen_ocsp_index.c: Handle serial as fixed order byte array

The previous approach assumed that the serial fits within a long long
unsigned type, because the test suite controls the serial. However,
this breaks on big endian architectures because the order in the
certificate is fixed and returned by gnutls_x509_crt_get_serial in
that way.

The fix is to print the serial byte for byte. Additionally OpenSSL
apparently requires upper case characters in the DB hex encoded
serial, which didn't show up previously due to the small serials. Use
a larger one for the server certificate to detect similar problems in
the future.

Cat the OCSP database into the test log for easier debugging on build
systems without direct file system access (e.g. Debian buildd).

File:

• test/server.template.in (modified) (1 diff)

test/server.template.in

@@ -1 @@
-serial=2
+serial=587198681
 cn=__HOSTNAME__
 tls_www_server