Mercurial > hg > nginx-tests
comparison grpc_ssl.t @ 1488:dbce8fb5f5f8
Tests: align with OpenSSL security level 2.
This updates minimum requirements to 2048 bit RSA keys and SHA-2 message digest.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 09 Jul 2019 13:37:55 +0300 |
parents | 01d806268a12 |
children | 0190dd24d328 |
comparison
equal
deleted
inserted
replaced
1487:fe0765147e15 | 1488:dbce8fb5f5f8 |
---|---|
101 | 101 |
102 EOF | 102 EOF |
103 | 103 |
104 $t->write_file('openssl.conf', <<EOF); | 104 $t->write_file('openssl.conf', <<EOF); |
105 [ req ] | 105 [ req ] |
106 default_bits = 1024 | 106 default_bits = 2048 |
107 encrypt_key = no | 107 encrypt_key = no |
108 distinguished_name = req_distinguished_name | 108 distinguished_name = req_distinguished_name |
109 [ req_distinguished_name ] | 109 [ req_distinguished_name ] |
110 EOF | 110 EOF |
111 | 111 |
119 or die "Can't create certificate for $name: $!\n"; | 119 or die "Can't create certificate for $name: $!\n"; |
120 } | 120 } |
121 | 121 |
122 foreach my $name ('client') { | 122 foreach my $name ('client') { |
123 system("openssl genrsa -out $d/$name.key -passout pass:$name " | 123 system("openssl genrsa -out $d/$name.key -passout pass:$name " |
124 . "-aes128 1024 >>$d/openssl.out 2>&1") == 0 | 124 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0 |
125 or die "Can't create private key: $!\n"; | 125 or die "Can't create private key: $!\n"; |
126 system('openssl req -x509 -new ' | 126 system('openssl req -x509 -new ' |
127 . "-config $d/openssl.conf -subj /CN=$name/ " | 127 . "-config $d/openssl.conf -subj /CN=$name/ " |
128 . "-out $d/$name.crt " | 128 . "-out $d/$name.crt " |
129 . "-key $d/$name.key -passin pass:$name" | 129 . "-key $d/$name.key -passin pass:$name" |