diff options
author | Vitaly Chikunov <vt@altlinux.org> | 2024-03-22 05:20:50 +0300 |
---|---|---|
committer | Vitaly Chikunov <vt@altlinux.org> | 2024-03-22 05:47:37 +0300 |
commit | ede3886cc5507c2ba000ab9b057f198da03e8766 (patch) | |
tree | def75a6609a9ab323ea5bcc8446f112db7ecddab | |
parent | 27245fdabff573bb85d6aeb2e228a854170296ee (diff) | |
download | gost-engine-ede3886cc5507c2ba000ab9b057f198da03e8766.zip gost-engine-ede3886cc5507c2ba000ab9b057f198da03e8766.tar.gz gost-engine-ede3886cc5507c2ba000ab9b057f198da03e8766.tar.bz2 |
Older `openssl crl` exits with 0 in regard to verify no matter actual verify
status, newer `openssl crl` could exit with 1 on verify failure. Make the test
backward-compatible comparing only an output.
Fixes: https://github.com/gost-engine/engine/issues/452
Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
-rw-r--r-- | tcl_tests/ca.try | 3 |
1 files changed, 1 insertions, 2 deletions
diff --git a/tcl_tests/ca.try b/tcl_tests/ca.try index 249923b..7da25de 100644 --- a/tcl_tests/ca.try +++ b/tcl_tests/ca.try @@ -88,8 +88,7 @@ test -skip {![file exists test.crl]} "Verifying CRL OK" { test -skip {![file exists test.crl]} "Verifying corrupted CRL" { makeFile "badcrl.pem" [hackPem "\01\x1E" [getFile test.crl] "\01\0"] grep verify [openssl "crl -in badcrl.pem -noout -CAfile $::test::ca/cacert.pem"] -} 0 "verify failure -" +} -1 "verify failure" test "Verifying CA certificate" { grep "(cacert.pem|error|OK)" [openssl "verify -CAfile $::test::ca/cacert.pem $::test::ca/cacert.pem"] |