aboutsummaryrefslogtreecommitdiff
path: root/tcl_tests
diff options
context:
space:
mode:
authorVitaly Chikunov <vt@altlinux.org>2024-03-22 05:20:50 +0300
committerVitaly Chikunov <vt@altlinux.org>2024-03-22 05:47:37 +0300
commitede3886cc5507c2ba000ab9b057f198da03e8766 (patch)
treedef75a6609a9ab323ea5bcc8446f112db7ecddab /tcl_tests
parent27245fdabff573bb85d6aeb2e228a854170296ee (diff)
downloadgost-engine-master.zip
gost-engine-master.tar.gz
gost-engine-master.tar.bz2
tcl_tests: ca.try: Ignore openssl crl exit status for 'corrupted CRL' testHEADmaster
Older `openssl crl` exits with 0 in regard to verify no matter actual verify status, newer `openssl crl` could exit with 1 on verify failure. Make the test backward-compatible comparing only an output. Fixes: https://github.com/gost-engine/engine/issues/452 Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
Diffstat (limited to 'tcl_tests')
-rw-r--r--tcl_tests/ca.try3
1 files changed, 1 insertions, 2 deletions
diff --git a/tcl_tests/ca.try b/tcl_tests/ca.try
index 249923b..7da25de 100644
--- a/tcl_tests/ca.try
+++ b/tcl_tests/ca.try
@@ -88,8 +88,7 @@ test -skip {![file exists test.crl]} "Verifying CRL OK" {
test -skip {![file exists test.crl]} "Verifying corrupted CRL" {
makeFile "badcrl.pem" [hackPem "\01\x1E" [getFile test.crl] "\01\0"]
grep verify [openssl "crl -in badcrl.pem -noout -CAfile $::test::ca/cacert.pem"]
-} 0 "verify failure
-"
+} -1 "verify failure"
test "Verifying CA certificate" {
grep "(cacert.pem|error|OK)" [openssl "verify -CAfile $::test::ca/cacert.pem $::test::ca/cacert.pem"]