Commit Graph

23 Commits

Author SHA1 Message Date
Marcial Rosales e7cb2420a7 Verify non-zero DNS and email SAN 2024-10-29 16:41:20 +01:00
Simon Unge b2904404da Use openssl.cnf config when generating new CSR 2024-09-10 17:20:41 +00:00
Marcial Rosales 1abc4ed02f Extract client_id from client cert 2024-08-30 11:39:48 +01:00
Rin Kuryloski 0881fe2ddb Adjust test cert generation in rabbitmq_ct_helpers
In some cases with OTP 26 `{bad_cert,invalid_ext_key_usage}` handshake
failures would occur. This change seems to fix that.
2023-05-23 13:15:28 +02:00
Michael Klishin 7c47d0925a
Revert "Correct a double quote introduced in #4603"
This reverts commit 6a44e0e2ef.

That wiped a lot of files unintentionally
2022-04-20 16:05:56 +04:00
Michael Klishin 6a44e0e2ef
Correct a double quote introduced in #4603 2022-04-20 16:01:29 +04:00
Philip Kuryloski 8c0eece3cd Adjustments for the latest bazel-erlang 2021-11-02 16:24:26 +01:00
Michael Klishin 57eb064824 openssl.cnf: use sha256 for default_md
Modern Python and OpenSSL versions
can reject certificates that use SHA-1
as insufficiently secure.

This is the case with Python 3 on Debian
Buster, for example

Per discussion with @pjk25 @dumbbell
2021-04-14 19:00:39 +03:00
Philip Kuryloski d273660c92 Add Bazel build (#47)
Add Bazel build files corresponding to rabbitmq/rabbitmq-server#2938

The gnu make build should remain unchanged by theses additions
2021-03-29 11:27:33 +02:00
Luke Bakken 15e39f2d3c Use sed to set DNS.1 in SAN since LibreSSL does not do env vars correctly 2018-08-27 08:22:05 -07:00
Luke Bakken 52b6a0a2f5 Ensure HOSTNAME is exported 2018-08-27 07:56:59 -07:00
Luke Bakken 0f4ef6fbdb Add HOSTNAME as DNS.1 in server_alt_names 2018-08-27 07:41:41 -07:00
Arnaud Cogoluègnes 465780e2f1 Add localhost as SAN to server certificate
This helps for Java client hostname verification tests on CI: the CI
containers resolve the hostname to an external IP address and the broker
doesn't accept the connection for guest because it's not from localhost.
By using localhost in the server certificate SAN, hostname verification
is enforced and the connection is from localhost.
2018-08-27 15:06:46 +02:00
Luke Bakken bec69ae0f1 Merge branch 'stable' 2017-12-12 12:17:35 -08:00
Luke Bakken a4a62c0a1f Fix test syntax yet again for /bin/sh 2017-12-12 12:17:24 -08:00
Luke Bakken b953a0e9ce Merge branch 'stable' 2017-12-12 12:03:10 -08:00
Luke Bakken 05a4b6411a Fix test syntax for /bin/sh 2017-12-12 12:02:56 -08:00
Luke Bakken 99f4388de5 Merge branch 'stable' 2017-12-12 12:00:14 -08:00
Luke Bakken afb574705c hostname behaves differently between Darwin and Linux of course 2017-12-12 12:00:01 -08:00
Luke Bakken 0f90713221 Merge branch 'stable' 2017-12-12 11:35:44 -08:00
Luke Bakken 5cca751b5c Use "hostname -s" to drop domain part of DNS name 2017-12-12 11:35:06 -08:00
Luke Bakken 1e22a0c36e Tweak keyUsage field to make Erlang happy
Add defaults for some fields - https://bugs.erlang.org/browse/ERL-236
2017-12-05 13:30:20 -08:00
Jean-Sébastien Pédron 6e505d9e73 Initial import of all testsuite helpers
[#130086871]
2016-09-15 11:51:31 +02:00