Test github.com/aws/aws-sdk-go/aws/session fails with Go 1.18 due to SHA1 being rejected by default.

[jawn-smith]

Confirm by changing [ ] to [x] below to ensure that it's a bug:

• I've gone though Developer Guide and API reference
• I've checked AWS Forums and StackOverflow for answers
• I've searched for previous similar issues and didn't find any solution

Describe the bug
TestNewSession_WithCustomCABundle* fails with Go 1.18

Version of AWS SDK for Go?
1.43.19

Version of Go (go version)?
1.18

To Reproduce (observed behavior)
go test ./...

TestMain /tmp/aws-sdk-go-session-test3606657906 /tmp/aws-sdk-go-session-test1981254626
2022/03/16 11:55:43 http: TLS handshake error from 127.0.0.1:56468: remote error: tls: bad certificate
2022/03/16 11:55:43 http: TLS handshake error from 127.0.0.1:56470: remote error: tls: bad certificate
--- FAIL: TestNewSession_WithCustomCABundle_Env (1.00s)
    custom_ca_bundle_test.go:70: expect no error, got Get "https://127.0.0.1:36943": x509: certificate signed by unknown authority (possibly because of "x509: cannot verify signature: insecure algorithm SHA1-RSA (temporarily override with GODEBUG=x509sha1=1)" while trying to verify candidate authority certificate "Testing ROOT CA")
2022/03/16 11:55:44 http: TLS handshake error from 127.0.0.1:37100: remote error: tls: bad certificate
2022/03/16 11:55:44 http: TLS handshake error from 127.0.0.1:37102: remote error: tls: bad certificate
--- FAIL: TestNewSession_WithCustomCABundle_Option (1.00s)
    custom_ca_bundle_test.go:123: expect no error, got Get "https://127.0.0.1:39763": x509: certificate signed by unknown authority (possibly because of "x509: cannot verify signature: insecure algorithm SHA1-RSA (temporarily override with GODEBUG=x509sha1=1)" while trying to verify candidate authority certificate "Testing ROOT CA")
2022/03/16 11:55:45 http: TLS handshake error from 127.0.0.1:51716: remote error: tls: bad certificate
2022/03/16 11:55:45 http: TLS handshake error from 127.0.0.1:51718: remote error: tls: bad certificate
--- FAIL: TestNewSession_WithCustomCABundle_OptionPriority (1.00s)
    custom_ca_bundle_test.go:188: expect no error, got Get "https://127.0.0.1:40905": x509: certificate signed by unknown authority (possibly because of "x509: cannot verify signature: insecure algorithm SHA1-RSA (temporarily override with GODEBUG=x509sha1=1)" while trying to verify candidate authority certificate "Testing ROOT CA")
2022/03/16 11:55:46 http: TLS handshake error from 127.0.0.1:60512: remote error: tls: bad certificate
2022/03/16 11:55:46 http: TLS handshake error from 127.0.0.1:60514: remote error: tls: bad certificate
--- FAIL: TestNewSession_WithCustomCABundle_TransportSet (1.00s)
    custom_ca_bundle_test.go:266: expect no error, got Get "https://127.0.0.1:36415": x509: certificate signed by unknown authority (possibly because of "x509: cannot verify signature: insecure algorithm SHA1-RSA (temporarily override with GODEBUG=x509sha1=1)" while trying to verify candidate authority certificate "Testing ROOT CA")
2022/03/16 11:55:46 ERROR: failed to load CSM configuration, SharedConfigLoadError: failed to load config file, testdata/shared_config_invalid_ini
caused by: INIParseError: invalid state with ASTKind {section_stmt {1 STRING 0 [112 114 111 102 105 108 101 95 110 97 109]} true []} and TokenType none
2022/03/16 11:55:46 ERROR: failed to load CSM configuration, SharedConfigLoadError: failed to load config file, testdata/shared_config_invalid_ini
caused by: INIParseError: invalid state with ASTKind {section_stmt {1 STRING 0 [112 114 111 102 105 108 101 95 110 97 109]} true []} and TokenType none
FAIL
FAIL    github.com/aws/aws-sdk-go/aws/session   13.078s

Expected behavior
Tests pass

Additional context
This was discovered in Ubuntu while moving from Go 1.17 to 1.18 for the upcoming 22.04 release. Per the Go 1.18 release notes (https://go.dev/doc/go1.18) SHA1 is now rejected by default for security reasons.

[jasdel]

Thanks for reporting this issue @GlenPickle I've created PR #4318 updating the SDK's unit tests for Go 1.18.

[github-actions]

⚠️COMMENT VISIBILITY WARNING⚠️

Comments on closed issues are hard for our team to see.
If you need more assistance, please either tag a team member or open a new issue that references this one.
If you wish to keep having a conversation with other community members under this issue feel free to do so.