Mercurial > hg > nginx-tests
comparison ssl_certificates.t @ 1131:7cce4d12579c
Tests: fixed generating DH/DSA parameter using OpenSSL 1.1.0.
According to OpenSSL documentation, numbits must be the last option,
and OpenSSL 1.1.0 insists on that order.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Wed, 15 Feb 2017 23:51:49 +0300 |
parents | 8ef51dbb5d69 |
children | 778eae8230e4 |
comparison
equal
deleted
inserted
replaced
1130:cb46ac65d50e | 1131:7cce4d12579c |
---|---|
71 [ req_distinguished_name ] | 71 [ req_distinguished_name ] |
72 EOF | 72 EOF |
73 | 73 |
74 my $d = $t->testdir(); | 74 my $d = $t->testdir(); |
75 | 75 |
76 system("openssl dhparam -dsaparam 1024 -out '$d/dhparam.pem' " | 76 system("openssl dhparam -dsaparam -out '$d/dhparam.pem' 1024 " |
77 . ">>$d/openssl.out 2>&1") == 0 or die "Can't create DH param: $!\n"; | 77 . ">>$d/openssl.out 2>&1") == 0 or die "Can't create DH param: $!\n"; |
78 system("openssl genrsa -out '$d/rsa.key' >>$d/openssl.out 2>&1") == 0 | 78 system("openssl genrsa -out '$d/rsa.key' >>$d/openssl.out 2>&1") == 0 |
79 or die "Can't create RSA pem: $!\n"; | 79 or die "Can't create RSA pem: $!\n"; |
80 system("openssl dsaparam -genkey 1024 -out '$d/dsa.key' >>$d/openssl 2>&1") == 0 | 80 system("openssl dsaparam -genkey -out '$d/dsa.key' 1024 >>$d/openssl 2>&1") == 0 |
81 or die "Can't create DSA pem: $!\n"; | 81 or die "Can't create DSA pem: $!\n"; |
82 | 82 |
83 foreach my $name ('dsa', 'rsa') { | 83 foreach my $name ('dsa', 'rsa') { |
84 system("openssl req -x509 -new -key '$d/$name.key' " | 84 system("openssl req -x509 -new -key '$d/$name.key' " |
85 . "-config '$d/openssl.conf' -subj '/CN=$name/' " | 85 . "-config '$d/openssl.conf' -subj '/CN=$name/' " |