From 568656b1fcb60d451b4a5313876ef0b96ae8bbfd Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 13 Jun 2024 14:30:30 +0200
Subject: t/cert-extensions: Fix tr(1) range syntax.

---
 tests/cert-extensions | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

(limited to 'tests/cert-extensions')

diff --git a/tests/cert-extensions b/tests/cert-extensions
index a397ee5..bc40298 100644
--- a/tests/cert-extensions
+++ b/tests/cert-extensions
@@ -10,7 +10,7 @@ x509_check() {
 
 # default settings (the ACME server adds a subjectAltName with the Common Name)
 openssl genpkey -algorithm RSA -out /etc/lacme/test1.key
-commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "[A-Z]" "[a-z]").$DOMAINNAME"
+commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "A-Z" "a-z").$DOMAINNAME"
 cat >"/etc/lacme/lacme-certs.conf.d/test1.conf" <<- EOF
 	[test1]
 	certificate-key = /etc/lacme/test1.key
@@ -34,10 +34,10 @@ EOF
 
 # subjectAltName
 openssl genpkey -algorithm RSA -out /etc/lacme/test2.key
-commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "[A-Z]" "[a-z]").$DOMAINNAME"
+commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "A-Z" "a-z").$DOMAINNAME"
 subjectAltName=""
 for i in $(seq 1 8); do
-    subjectAltName="${subjectAltName:+"$subjectAltName "}$(head -c10 /dev/urandom | base32 -w0 | tr "[A-Z]" "[a-z]").$DOMAINNAME"
+    subjectAltName="${subjectAltName:+"$subjectAltName "}$(head -c10 /dev/urandom | base32 -w0 | tr "A-Z" "a-z").$DOMAINNAME"
 done
 cat >"/etc/lacme/lacme-certs.conf.d/test2.conf" <<- EOF
 	[test2]
@@ -63,7 +63,7 @@ EOF
 
 # tlsfeature
 openssl genpkey -algorithm RSA -out /etc/lacme/test3.key
-commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "[A-Z]" "[a-z]").$DOMAINNAME"
+commonName="$(head -c10 /dev/urandom | base32 -w0 | tr "A-Z" "a-z").$DOMAINNAME"
 cat >"/etc/lacme/lacme-certs.conf.d/test3.conf" <<- EOF
 	[test3]
 	certificate-key = /etc/lacme/test3.key
-- 
cgit v1.2.3


From bf4d2d13ffcd894c6e7765dbd366f1163c69c9e1 Mon Sep 17 00:00:00 2001
From: Guilhem Moulin <guilhem@fripost.org>
Date: Thu, 13 Jun 2024 03:33:20 +0200
Subject: Pass `-in /dev/stdin` option to openssl(1) to avoid warning with
 recent versions.

OpenSSL 3.2 from Debian sid spews

    Warning: Reading certificate from stdin since no -in or -new option is given

without an explicit `-in /dev/stdin`.
---
 tests/cert-extensions | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'tests/cert-extensions')

diff --git a/tests/cert-extensions b/tests/cert-extensions
index bc40298..d7e7855 100644
--- a/tests/cert-extensions
+++ b/tests/cert-extensions
@@ -4,7 +4,7 @@ x509_check() {
     local cert="$1" ext out
     out="$(mktemp --tmpdir)"
     ext="basicConstraints,subjectAltName,keyUsage,extendedKeyUsage,tlsfeature"
-    openssl x509 -noout -subject -ext "$ext" -nameopt compat <"$cert" >"$out"
+    openssl x509 -in "$cert" -noout -subject -ext "$ext" -nameopt compat >"$out"
     diff --unified --color=auto -b --label="a/${cert#/}" --label="b/${cert#/}" -- - "$out"
 }
 
-- 
cgit v1.2.3