Horton

Set fixed dates for test certificates validity

Daniel Gustafsson <dgustafsson@postgresql.org>

View on postgr.es
Commit: 40fad96530caf190a3babf322ca705e744c393bb
Author: Daniel Gustafsson <dgustafsson@postgresql.org>
Date: 2023-07-20T14:04:27Z
Releases: 17.0 
Set fixed dates for test certificates validity

Rather than specifying a validity of 10 000 days into the future
during test certificate generation, this hardcodes the notBefore
and notAfter attributes to known values. This will allow writing
tests on the validity of the certificates without knowing when a
specific certificate was regenerated.

This is done as a prerequisite for an upcoming patch which adds
notBefore and notAfter to pg_stat_ssl and sslinfo.

Discussion: https://postgr.es/m/EE288A58-947E-479A-9D99-C46C273D7A23@yesql.se

Files

PathChange+/−
src/test/ssl/conf/cas.config modified +4 −1
src/test/ssl/ssl/both-cas-1.crt modified +38 −32
src/test/ssl/ssl/both-cas-2.crt modified +38 −32
src/test/ssl/ssl/client_ca.crt modified +19 −16
src/test/ssl/ssl/client+client_ca.crt modified +34 −31
src/test/ssl/ssl/client.crl modified +10 −10
src/test/ssl/ssl/client-crldir/9bb9e3c3.r0 modified +10 −10
src/test/ssl/ssl/client.crt modified +15 −15
src/test/ssl/ssl/client-dn.crt modified +16 −16
src/test/ssl/ssl/client_ext.crt modified +16 −17
src/test/ssl/ssl/client-long.crt modified +17 −17
src/test/ssl/ssl/client-revoked.crt modified +15 −15
src/test/ssl/ssl/client-revoked-utf8.crt modified +15 −15
src/test/ssl/ssl/root+client_ca.crt modified +19 −16
src/test/ssl/ssl/root+client.crl modified +10 −10
src/test/ssl/ssl/root+client-crldir/9bb9e3c3.r0 modified +10 −10
src/test/ssl/ssl/root+server_ca.crt modified +19 −16
src/test/ssl/ssl/root+server.crl modified +9 −9
src/test/ssl/ssl/root+server-crldir/a836cc2d.r0 modified +9 −9
src/test/ssl/ssl/server_ca.crt modified +19 −16
src/test/ssl/ssl/server-cn-and-alt-names.crt modified +19 −17
src/test/ssl/ssl/server-cn-and-ip-alt-names.crt modified +18 −17
src/test/ssl/ssl/server-cn-only.crt modified +16 −16
src/test/ssl/ssl/server-cn-only+server_ca.crt modified +35 −32
src/test/ssl/ssl/server.crl modified +9 −9
src/test/ssl/ssl/server-crldir/a836cc2d.r0 modified +9 −9
src/test/ssl/ssl/server-ip-alt-names.crt modified +17 −16
src/test/ssl/ssl/server-ip-cn-and-alt-names.crt modified +18 −16
src/test/ssl/ssl/server-ip-cn-and-dns-alt-names.crt modified +18 −17
src/test/ssl/ssl/server-ip-cn-only.crt modified +15 −15
src/test/ssl/ssl/server-ip-in-dnsname.crt modified +17 −15
src/test/ssl/ssl/server-multiple-alt-names.crt modified +19 −17
src/test/ssl/ssl/server-no-names.crt modified +15 −15
src/test/ssl/ssl/server-revoked.crt modified +16 −16
src/test/ssl/ssl/server-single-alt-name.crt modified +17 −16

Discussion