Changeset b8b1990 in mod_gnutls for test/tests/12_cgi_variables

Timestamp:

Jul 5, 2017, 4:31:34 PM (3 years ago)

Author:

Thomas Klute <thomas2.klute@…>

Branches:

debian/master, debian/stretch-backports, master, proxy-ticket, upstream

Children:

cdc6e4a

Parents:

f4deac5

Message:

Use fixed DH parameters for tests that log DH prime length in CGI output

Default key and DH parameter sizes vary between GnuTLS versions, so
using the defaults could lead to unexpected output and thus failing
tests. Fixed parameters avoid the problem.

Location:

test/tests/12_cgi_variables

Files:

• apache.conf (modified) (1 diff)
• output (modified) (1 diff)

test/tests/12_cgi_variables/apache.conf

@@ -13 +13 @@
  GnuTLSCertificateFile server/x509.pem
  GnuTLSKeyFile server/secret.key
+ GnuTLSDHFile ${srcdir}/ffdhe3072.pem
  GnuTLSPriorities NORMAL
  GnuTLSClientCAFile authority/x509.pem

test/tests/12_cgi_variables/output

@@ -8 +8 @@
 RFC822NAME:test0@modgnutls.test
 
-DH prime bits: 2048
+DH prime bits: 3072
 - Peer has closed the GnuTLS connection