changeset 1140:778eae8230e4

Tests: reduced OpenSSL default key length to 1024. This allows to speed up ssl tests.
author Andrey Zelenkov <zelenkov@nginx.com>
date Wed, 01 Mar 2017 19:15:39 +0300
parents e7e968e3eb74
children d4e779356d8d
files proxy_ssl_certificate.t ssl_certificates.t ssl_engine_keys.t ssl_password_file.t stream_proxy_ssl_certificate.t stream_ssl.t
diffstat 6 files changed, 6 insertions(+), 6 deletions(-) [+]
line wrap: on
line diff
--- a/proxy_ssl_certificate.t
+++ b/proxy_ssl_certificate.t
@@ -118,7 +118,7 @@ foreach my $name ('1.example.com', '2.ex
 
 foreach my $name ('3.example.com') {
 	system("openssl genrsa -out '$d/$name.key' -passout pass:$name "
-		. "-aes128 2048 >>$d/openssl.out 2>&1") == 0
+		. "-aes128 1024 >>$d/openssl.out 2>&1") == 0
 		or die "Can't create private key: $!\n";
 	system('openssl req -x509 -new '
 		. "-config '$d/openssl.conf' -subj '/CN=$name/' "
--- a/ssl_certificates.t
+++ b/ssl_certificates.t
@@ -75,7 +75,7 @@ my $d = $t->testdir();
 
 system("openssl dhparam -dsaparam -out '$d/dhparam.pem' 1024 "
 	. ">>$d/openssl.out 2>&1") == 0 or die "Can't create DH param: $!\n";
-system("openssl genrsa -out '$d/rsa.key' >>$d/openssl.out 2>&1") == 0
+system("openssl genrsa -out '$d/rsa.key' 1024 >>$d/openssl.out 2>&1") == 0
         or die "Can't create RSA pem: $!\n";
 system("openssl dsaparam -genkey -out '$d/dsa.key' 1024 >>$d/openssl 2>&1") == 0
 	or die "Can't create DSA pem: $!\n";
--- a/ssl_engine_keys.t
+++ b/ssl_engine_keys.t
@@ -108,7 +108,7 @@ foreach my $name ('localhost') {
 		. ">>$d/openssl.out 2>&1");
 
 	system('pkcs11-tool --module=/usr/local/lib/softhsm/libsofthsm.so '
-		. '-p 1234 -l -k -d 0 -a nx_key_0 --key-type rsa:2048 '
+		. '-p 1234 -l -k -d 0 -a nx_key_0 --key-type rsa:1024 '
 		. ">>$d/openssl.out 2>&1");
 
 	system('openssl req -x509 -new -engine pkcs11 '
--- a/ssl_password_file.t
+++ b/ssl_password_file.t
@@ -103,7 +103,7 @@ mkfifo("$d/password_fifo", 0700);
 
 foreach my $name ('localhost', 'inherits') {
 	system("openssl genrsa -out '$d/$name.key' -passout pass:$name "
-		. "-aes128 2048 >>$d/openssl.out 2>&1") == 0
+		. "-aes128 1024 >>$d/openssl.out 2>&1") == 0
 		or die "Can't create private key: $!\n";
 	system('openssl req -x509 -new '
 		. "-config '$d/openssl.conf' -subj '/CN=$name/' "
--- a/stream_proxy_ssl_certificate.t
+++ b/stream_proxy_ssl_certificate.t
@@ -122,7 +122,7 @@ foreach my $name ('1.example.com', '2.ex
 
 foreach my $name ('3.example.com') {
 	system("openssl genrsa -out '$d/$name.key' -passout pass:$name "
-		. "-aes128 2048 >>$d/openssl.out 2>&1") == 0
+		. "-aes128 1024 >>$d/openssl.out 2>&1") == 0
 		or die "Can't create private key: $!\n";
 	system('openssl req -x509 -new '
 		. "-config '$d/openssl.conf' -subj '/CN=$name/' "
--- a/stream_ssl.t
+++ b/stream_ssl.t
@@ -101,7 +101,7 @@ mkfifo("$d/password_fifo", 0700);
 
 foreach my $name ('localhost', 'inherits') {
 	system("openssl genrsa -out '$d/$name.key' -passout pass:$name "
-		. "-aes128 2048 >>$d/openssl.out 2>&1") == 0
+		. "-aes128 1024 >>$d/openssl.out 2>&1") == 0
 		or die "Can't create private key: $!\n";
 	system('openssl req -x509 -new '
 		. "-config '$d/openssl.conf' -subj '/CN=$name/' "