Changeset be2ad50 in mod_gnutls for test/tests/21_TLS_reverse_proxy_wrong_cert/test.yaml

Timestamp:

Sep 25, 2020, 4:19:27 PM (2 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, master

Children:

f363569

Parents:

cbc3477

Message:

Create untrusted, but otherwise good certificate for validation test

The previous "imposter" certificate would've already failed the
hostname check. It's still used in SNI tests, to be replaced with a
better fitting certificate later.

File:

• test/tests/21_TLS_reverse_proxy_wrong_cert/test.yaml (modified) (1 diff)

test/tests/21_TLS_reverse_proxy_wrong_cert/test.yaml

@@ -18 +18 @@
   description: >-
     Check if the proxy itself works correctly and presents the
-    expected bad certificate
+    expected untrusted certificate
   host: '${BACKEND_HOST}'
   port: '${BACKEND_PORT}'
   gnutls_params:
-    - x509cafile=authority/x509.pem
-    - verify-hostname=imposter.example
+    - x509cafile=rogueca/x509.pem
   actions:
     - !request