diff options
| author | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-29 16:00:30 +0100 |
|---|---|---|
| committer | Nikos Mavrogiannopoulos <nmav@redhat.com> | 2016-11-29 16:25:52 +0100 |
| commit | 485a886843a99f354079b086c16b44d1292f3801 (patch) | |
| tree | 4a6c4798a8aa048944287536197dca1c29f8bace | |
| parent | e751f2ee254e146190f4562b6cf48f64c0eef1a1 (diff) | |
| download | gnutls-tmp-rsa-md5-update.tar.gz | |
tests: use datefudge in rsa-md5-collision checktmp-rsa-md5-update
This makes sure that any failure detected is not because of
expired certificates, but because of MD5 being disabled.
| -rwxr-xr-x | tests/rsa-md5-collision/rsa-md5-collision.sh | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/tests/rsa-md5-collision/rsa-md5-collision.sh b/tests/rsa-md5-collision/rsa-md5-collision.sh index de0e5ae77b..5de2d66627 100755 --- a/tests/rsa-md5-collision/rsa-md5-collision.sh +++ b/tests/rsa-md5-collision/rsa-md5-collision.sh @@ -27,6 +27,9 @@ CERTTOOL="${CERTTOOL:-../src/certtool${EXEEXT}}" TMPFILE1=rsa-md5.$$.tmp TMPFILE2=rsa-md5-2.$$.tmp +. ${srcdir}/scripts/common.sh +check_for_datefudge + "${CERTTOOL}" --inder --certificate-info \ --infile "${srcdir}/rsa-md5-collision/TargetCollidingCertificate1.cer" > $TMPFILE1 "${CERTTOOL}" --inder --certificate-info \ @@ -37,8 +40,10 @@ TMPFILE2=rsa-md5-2.$$.tmp "${CERTTOOL}" --inder --certificate-info \ --infile "${srcdir}/rsa-md5-collision/MD5CollisionCA.cer" >> $TMPFILE2 +datefudge -s "2016-10-1" \ "${CERTTOOL}" --verify-chain < $TMPFILE1 | \ grep 'Not verified.' | grep 'insecure algorithm' >/dev/null +datefudge -s "2016-10-1" \ "${CERTTOOL}" --verify-chain < $TMPFILE2 | \ grep 'Not verified.' | grep 'insecure algorithm' >/dev/null |