Mercurial > hg > nginx-tests

changeset 1815:173c9b792c2c

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: fixed hostname verification in ssl_certificate_chain.t. ssl_certificate_chain.t doesn't supply the hostname expected in a tested certificate, which causes IO::Socket::SSL to fall back to an IP address given in PeerAddr. As of IO::Socket::SSL 2.078, verification enabled by default for such hostnames [1] results in "hostname verification failed" errors. To keep tests simple, the IP address is now included in subjectAltName. [1] https://github.com/noxxi/p5-io-socket-ssl/issues/121
author Sergey Kandaurov <pluknet@nginx.com>
date Thu, 15 Dec 2022 21:02:18 +0400
parents 1d88487eafbf
children 5817625792bd
files ssl_certificate_chain.t
diffstat 1 files changed, 1 insertions(+), 0 deletions(-) [+]
line wrap: on
line diff
--- a/ssl_certificate_chain.t
+++ b/ssl_certificate_chain.t
@@ -97,6 +97,7 @@ commonName = supplied
 
 [ myca_extensions ]
 basicConstraints = critical,CA:TRUE
+subjectAltName = IP:127.0.0.1
 EOF
 
 foreach my $name ('root') {