Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

tests: let openssl generate random cert serials #15129

Closed
wants to merge 1 commit into from

Conversation

vszakats
Copy link
Member

@vszakats vszakats commented Oct 2, 2024

Generate the certificate serial numbers automatically instead of doing
from shell (or Perl earlier).

Fixes intermittent CI failures due to the shell-based random generator
generating the same serial number twice:

$ openssl ca -config EdelCurlRoot-ca.cnf -revoke Server-localhost0h-sv.crt
Using configuration from EdelCurlRoot-ca.cnf
ERROR:Already revoked, serial number 66FDB23A
make: *** [../../../tests/certs/Server-localhost0h-sv.pem] Error 1

https://github.com/curl/curl/actions/runs/11151401083/job/30994755798?pr=15128#step:10:498

Follow-up to fa461b4 #14486
Follow-up to fa69b41 #13307

Fixes intermittend CI failure because the shell-based random generator
generated the same number twice:
```
$ openssl ca -config EdelCurlRoot-ca.cnf -revoke Server-localhost0h-sv.crt
Using configuration from EdelCurlRoot-ca.cnf
ERROR:Already revoked, serial number 66FDB23A
make: *** [../../../tests/certs/Server-localhost0h-sv.pem] Error 1
```
https://github.com/curl/curl/actions/runs/11151401083/job/30994755798?pr=15128#step:10:498

Follow-up to fa461b4 curl#14486
Follow-up to fa69b41 curl#13307
@vszakats vszakats added CI Continuous Integration tests labels Oct 2, 2024
@github-actions github-actions bot added the script label Oct 2, 2024
@vszakats vszakats changed the title tests: let openssl generate random certs serials tests: let openssl generate random cert serials Oct 2, 2024
@vszakats vszakats added the TLS label Oct 2, 2024
@vszakats vszakats closed this in 9b0c0d6 Oct 2, 2024
@vszakats vszakats deleted the crtserial branch October 2, 2024 23:19
vszakats added a commit to vszakats/curl that referenced this pull request Nov 1, 2024
Also:
- display openssl path and version.
- quote a string.

Follow-up to 9b0c0d6 curl#15129
vszakats added a commit that referenced this pull request Nov 1, 2024
Also:
- display openssl path and version.
- quote a string.

Follow-up to 9b0c0d6 #15129

Closes #15471
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
CI Continuous Integration script tests TLS
Development

Successfully merging this pull request may close these issues.

1 participant