aboutsummaryrefslogtreecommitdiffstats
path: root/tests/certs
Commit message (Collapse)AuthorAgeFiles
* tests/certs/generate: Generate X.509 version 3 CA.Guilhem Moulin2024-03-061
| | | | | And pass CA:TRUE as basic constraint. This fixes the test suite with OpenSSL 3.2 with defaults to X.509v3 and CA:FALSE.
* tests/certs/generate: Use custom openssl.cnf.Guilhem Moulin2022-02-252
| | | | To avoid depending on the system default.
* tests/certs/generate: Redirect known error output to the standard output.Guilhem Moulin2022-02-251
| | | | That way we can avoid using autopkgtest's 'allow-stderr' restriction.
* libinterimap: add support for the TLS SNI (Server Name Indication) extension.Guilhem Moulin2020-12-111
| | | | | | This is controlled by the new 'SSL_hostname' option. The default value of that option is the value of the 'host' option when it is hostname, and the empty string (which disables SNI) when it is an IP literal.
* libinterimap: make SSL_verify check the hostname as well.Guilhem Moulin2020-12-111
| | | | | | | | | | More precisely, ensure that the certificate Subject Alternative Name (SAN) or Subject CommonName (CN) matches the hostname or IP literal specified by the 'host' option. Previously it was only verifying the chain of trust. This bumps the minimum Net::SSLeay version to 1.83 and OpenSSL version 1.0.2.
* test suite: always generate new certificates on `make test`.Guilhem Moulin2020-12-112
In addition, sign test certificates with the same root CA. Hence running `make test` now requires OpenSSL 1.1.1 or later.
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-14 20:57:45 +0000