зеркало из https://github.com/github/ruby.git
[ruby/openssl] test/openssl/test_ssl: fix illegal SAN extension
A certificate can only have one SubjectAltName extension. OpenSSL 3.0 performs a stricter validation and certificates containing multiple SANs will be rejected. https://github.com/ruby/openssl/commit/558cfbe5f5
This commit is contained in:
Родитель
79d5abd01b
Коммит
d67fe1e9de
|
@ -593,8 +593,7 @@ class OpenSSL::TestSSL < OpenSSL::SSLTestCase
|
|||
|
||||
exts = [
|
||||
["keyUsage","keyEncipherment,digitalSignature",true],
|
||||
["subjectAltName","DNS:localhost.localdomain",false],
|
||||
["subjectAltName","IP:127.0.0.1",false],
|
||||
["subjectAltName","DNS:localhost.localdomain,IP:127.0.0.1",false],
|
||||
]
|
||||
@svr_cert = issue_cert(@svr, @svr_key, 4, exts, @ca_cert, @ca_key)
|
||||
start_server { |port|
|
||||
|
|
Загрузка…
Ссылка в новой задаче