Mercurial > hg > nginx-tests

comparison grpc_ssl.t @ 1488:dbce8fb5f5f8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: align with OpenSSL security level 2. This updates minimum requirements to 2048 bit RSA keys and SHA-2 message digest.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 09 Jul 2019 13:37:55 +0300
parents 01d806268a12
children 0190dd24d328
comparison
equal deleted inserted replaced
1487:fe0765147e15 1488:dbce8fb5f5f8
101 101
102 EOF 102 EOF
103 103
104 $t->write_file('openssl.conf', <<EOF); 104 $t->write_file('openssl.conf', <<EOF);
105 [ req ] 105 [ req ]
106 default_bits = 1024 106 default_bits = 2048
107 encrypt_key = no 107 encrypt_key = no
108 distinguished_name = req_distinguished_name 108 distinguished_name = req_distinguished_name
109 [ req_distinguished_name ] 109 [ req_distinguished_name ]
110 EOF 110 EOF
111 111
119 or die "Can't create certificate for $name: $!\n"; 119 or die "Can't create certificate for $name: $!\n";
120 } 120 }
121 121
122 foreach my $name ('client') { 122 foreach my $name ('client') {
123 system("openssl genrsa -out $d/$name.key -passout pass:$name " 123 system("openssl genrsa -out $d/$name.key -passout pass:$name "
124 . "-aes128 1024 >>$d/openssl.out 2>&1") == 0 124 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
125 or die "Can't create private key: $!\n"; 125 or die "Can't create private key: $!\n";
126 system('openssl req -x509 -new ' 126 system('openssl req -x509 -new '
127 . "-config $d/openssl.conf -subj /CN=$name/ " 127 . "-config $d/openssl.conf -subj /CN=$name/ "
128 . "-out $d/$name.crt " 128 . "-out $d/$name.crt "
129 . "-key $d/$name.key -passin pass:$name" 129 . "-key $d/$name.key -passin pass:$name"