Mercurial > hg > nginx-tests

comparison stream_proxy_ssl_certificate.t @ 1488:dbce8fb5f5f8

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: align with OpenSSL security level 2. This updates minimum requirements to 2048 bit RSA keys and SHA-2 message digest.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 09 Jul 2019 13:37:55 +0300
parents eadd24ccfda1
children f3ba4c74de31
comparison
equal deleted inserted replaced
1487:fe0765147e15 1488:dbce8fb5f5f8
102 102
103 EOF 103 EOF
104 104
105 $t->write_file('openssl.conf', <<EOF); 105 $t->write_file('openssl.conf', <<EOF);
106 [ req ] 106 [ req ]
107 default_bits = 1024 107 default_bits = 2048
108 encrypt_key = no 108 encrypt_key = no
109 distinguished_name = req_distinguished_name 109 distinguished_name = req_distinguished_name
110 [ req_distinguished_name ] 110 [ req_distinguished_name ]
111 EOF 111 EOF
112 112
120 or die "Can't create certificate for $name: $!\n"; 120 or die "Can't create certificate for $name: $!\n";
121 } 121 }
122 122
123 foreach my $name ('3.example.com') { 123 foreach my $name ('3.example.com') {
124 system("openssl genrsa -out $d/$name.key -passout pass:$name " 124 system("openssl genrsa -out $d/$name.key -passout pass:$name "
125 . "-aes128 1024 >>$d/openssl.out 2>&1") == 0 125 . "-aes128 2048 >>$d/openssl.out 2>&1") == 0
126 or die "Can't create private key: $!\n"; 126 or die "Can't create private key: $!\n";
127 system('openssl req -x509 -new ' 127 system('openssl req -x509 -new '
128 . "-config $d/openssl.conf -subj /CN=$name/ " 128 . "-config $d/openssl.conf -subj /CN=$name/ "
129 . "-out $d/$name.crt " 129 . "-out $d/$name.crt "
130 . "-key $d/$name.key -passin pass:$name" 130 . "-key $d/$name.key -passin pass:$name"