Skip Menu |
 

This queue is for tickets about the Net-SSLeay CPAN distribution.

Report information
The Basics
Id: 129201
Status: resolved
Priority: 0/
Queue: Net-SSLeay

People
Owner: Nobody in particular
Requestors: ppisar [...] redhat.com
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 1.86_09
Fixed in: 1.86_10



Subject: t/local/36_verify.t fails because of expired t/data/chain_twitter.crt.pem
Download (untitled) / with headers
text/plain 636b
t/data/chain_twitter.crt.pem certificate used by t/local/36_verify.t expired on 2019-04-08. As a result, the test fails: $ prove -b t/local/36_verify.t t/local/36_verify.t .. 1/103 # Failed test 'X509_verify_cert correctly succeeds' # at t/local/36_verify.t line 249. # Failed test 'X509_STORE_CTX_get_error returns ok' # at t/local/36_verify.t line 250. # got: '10' # expected: '0' # Looks like you failed 2 tests of 103. t/local/36_verify.t .. Dubious, test returned 2 (wstat 512, 0x200) Failed 2/103 subtests $ openssl x509 -noout -enddate < t/data/chain_twitter.crt.pem notAfter=Apr 8 12:00:00 2019 GMT
Download (untitled) / with headers
text/plain 812b
Dne Út 16.dub.2019 10:53:54, ppisar napsal(a): Show quoted text
> t/data/chain_twitter.crt.pem certificate used by t/local/36_verify.t > expired on 2019-04-08. As a result, the test fails: > > $ prove -b t/local/36_verify.t > t/local/36_verify.t .. 1/103 > # Failed test 'X509_verify_cert correctly succeeds' > # at t/local/36_verify.t line 249. > > # Failed test 'X509_STORE_CTX_get_error returns ok' > # at t/local/36_verify.t line 250. > # got: '10' > # expected: '0' > # Looks like you failed 2 tests of 103. > t/local/36_verify.t .. Dubious, test returned 2 (wstat 512, 0x200) > Failed 2/103 subtests > > $ openssl x509 -noout -enddate < t/data/chain_twitter.crt.pem > notAfter=Apr 8 12:00:00 2019 GMT
This seems to be addressed in <https://github.com/radiator-software/p5-net-ssleay/pull/128>.
Download (untitled) / with headers
text/plain 342b
Dne Út 16.dub.2019 11:17:08, ppisar napsal(a): Show quoted text
> This seems to be addressed in <https://github.com/radiator- > software/p5-net-ssleay/pull/128>.
That fix only used a newer Twitter's certificate that expires soon. Here <https://github.com/radiator-software/p5-net-ssleay/pull/129> is my fix that uses home grown long lasting certificates.
Download (untitled) / with headers
text/plain 511b
On Thu Apr 18 10:41:28 2019, ppisar wrote: Show quoted text
> Dne Út 16.dub.2019 11:17:08, ppisar napsal(a):
> > This seems to be addressed in <https://github.com/radiator- > > software/p5-net-ssleay/pull/128>.
> > That fix only used a newer Twitter's certificate that expires soon. > > Here <https://github.com/radiator-software/p5-net-ssleay/pull/129> is > my fix that uses home grown long lasting certificates.
Thanks, Petr - I like the idea of using our own certificate chain rather than relying on Twitter's. PR merged.


This service is sponsored and maintained by Best Practical Solutions and runs on Perl.org infrastructure.

Please report any issues with rt.cpan.org to rt-cpan-admin@bestpractical.com.