Mercurial > hg > nginx-tests

comparison ssl_certificates.t @ 1131:7cce4d12579c

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: fixed generating DH/DSA parameter using OpenSSL 1.1.0. According to OpenSSL documentation, numbits must be the last option, and OpenSSL 1.1.0 insists on that order.
author Sergey Kandaurov <pluknet@nginx.com>
date Wed, 15 Feb 2017 23:51:49 +0300
parents 8ef51dbb5d69
children 778eae8230e4
comparison
equal deleted inserted replaced
1130:cb46ac65d50e 1131:7cce4d12579c
71 [ req_distinguished_name ] 71 [ req_distinguished_name ]
72 EOF 72 EOF
73 73
74 my $d = $t->testdir(); 74 my $d = $t->testdir();
75 75
76 system("openssl dhparam -dsaparam 1024 -out '$d/dhparam.pem' " 76 system("openssl dhparam -dsaparam -out '$d/dhparam.pem' 1024 "
77 . ">>$d/openssl.out 2>&1") == 0 or die "Can't create DH param: $!\n"; 77 . ">>$d/openssl.out 2>&1") == 0 or die "Can't create DH param: $!\n";
78 system("openssl genrsa -out '$d/rsa.key' >>$d/openssl.out 2>&1") == 0 78 system("openssl genrsa -out '$d/rsa.key' >>$d/openssl.out 2>&1") == 0
79 or die "Can't create RSA pem: $!\n"; 79 or die "Can't create RSA pem: $!\n";
80 system("openssl dsaparam -genkey 1024 -out '$d/dsa.key' >>$d/openssl 2>&1") == 0 80 system("openssl dsaparam -genkey -out '$d/dsa.key' 1024 >>$d/openssl 2>&1") == 0
81 or die "Can't create DSA pem: $!\n"; 81 or die "Can't create DSA pem: $!\n";
82 82
83 foreach my $name ('dsa', 'rsa') { 83 foreach my $name ('dsa', 'rsa') {
84 system("openssl req -x509 -new -key '$d/$name.key' " 84 system("openssl req -x509 -new -key '$d/$name.key' "
85 . "-config '$d/openssl.conf' -subj '/CN=$name/' " 85 . "-config '$d/openssl.conf' -subj '/CN=$name/' "