tests/certs/generate: Use custom openssl.cnf.

To avoid depending on the system default.

3 files changed, 9 insertions, 0 deletions

diff --git a/Changelog b/Changelog
index 72f7331..1365749 100644
--- a/Changelog
+++ b/Changelog
@@ -37,6 +37,8 @@ interimap (0.5.7) upstream;
    instead use $(bindir) (expanded at compile time).
  - tests/certs/generate: redirect known error output to the standard
    output.
+ - tests/certs/generate: use custom openssl.cnf to avoid depending on
+   the system default.
 
  -- Guilhem Moulin <guilhem@fripost.org>  Thu, 24 Feb 2022 01:28:25 +0100
 
diff --git a/tests/certs/generate b/tests/certs/generate
index 36fce8b..8e9c451 100755
--- a/tests/certs/generate
+++ b/tests/certs/generate
@@ -8,6 +8,9 @@ BASEDIR="$(dirname -- "$0")"
 OU="InterIMAP test suite"
 cd "$BASEDIR"
 
+OPENSSL_CONF="./openssl.cnf"
+export OPENSSL_CONF
+
 cadir="$(mktemp --tmpdir --directory)"
 trap 'rm -rf -- "$cadir"' EXIT INT TERM
 genpkey() {
diff --git a/tests/certs/openssl.cnf b/tests/certs/openssl.cnf
new file mode 100644
index 0000000..b1af7b8
--- /dev/null
+++ b/tests/certs/openssl.cnf
@@ -0,0 +1,4 @@
+[ req ]
+distinguished_name = req_distinguished_name
+
+[ req_distinguished_name ]