Changeset b8b1990 in mod_gnutls


Ignore:
Timestamp:
Jul 5, 2017, 4:31:34 PM (3 years ago)
Author:
Thomas Klute <thomas2.klute@…>
Branches:
debian/master, debian/stretch-backports, master, upstream
Children:
cdc6e4a
Parents:
f4deac5
Message:

Use fixed DH parameters for tests that log DH prime length in CGI output

Default key and DH parameter sizes vary between GnuTLS versions, so
using the defaults could lead to unexpected output and thus failing
tests. Fixed parameters avoid the problem.

Location:
test
Files:
1 added
5 edited

Legend:

Unmodified
Added
Removed

  • test/Makefile.am

    rf4deac5 rb8b1990  
    193193# Apache configuration and data files
    194194apache_data = base_apache.conf cgi_module.conf data/dump.cgi data/ocsp.cgi \
    195         data/secret.txt data/test.txt mime.types ocsp_server.conf \
    196         proxy_mods.conf
     195        data/secret.txt data/test.txt ffdhe3072.pem mime.types \
     196        ocsp_server.conf proxy_mods.conf
    197197
    198198EXTRA_DIST = $(apache_data) $(cert_templates) $(shared_identities:=.uid.in) \

  • test/tests/12_cgi_variables/apache.conf

    rf4deac5 rb8b1990  
    1313 GnuTLSCertificateFile server/x509.pem
    1414 GnuTLSKeyFile server/secret.key
     15 GnuTLSDHFile ${srcdir}/ffdhe3072.pem
    1516 GnuTLSPriorities NORMAL
    1617 GnuTLSClientCAFile authority/x509.pem

  • test/tests/12_cgi_variables/output

    rf4deac5 rb8b1990  
    88RFC822NAME:test0@modgnutls.test
    99
    10 DH prime bits: 2048
     10DH prime bits: 3072
    1111- Peer has closed the GnuTLS connection

  • test/tests/17_cgi_vars_large_cert/apache.conf

    rf4deac5 rb8b1990  
    1313 GnuTLSCertificateFile server/x509.pem
    1414 GnuTLSKeyFile server/secret.key
     15 GnuTLSDHFile ${srcdir}/ffdhe3072.pem
    1516 GnuTLSPriorities NORMAL
    1617 GnuTLSClientCAFile authority/x509.pem

  • test/tests/17_cgi_vars_large_cert/output

    rf4deac5 rb8b1990  
    88RFC822NAME:test0@modgnutls.test
    99
    10 DH prime bits: 2048
     10DH prime bits: 3072
    1111- Peer has closed the GnuTLS connection
Note: See TracChangeset for help on using the changeset viewer.