Skip to content

tests: let openssl generate random cert serials - #15129

Closed
vszakats wants to merge 1 commit into
curl:masterfrom
vszakats:crtserial
Closed

tests: let openssl generate random cert serials#15129
vszakats wants to merge 1 commit into
curl:masterfrom
vszakats:crtserial

Conversation

@vszakats

@vszakats vszakats commented Oct 2, 2024

Copy link
Copy Markdown
Member

Generate the certificate serial numbers automatically instead of doing
from shell (or Perl earlier).

Fixes intermittent CI failures due to the shell-based random generator
generating the same serial number twice:

$ openssl ca -config EdelCurlRoot-ca.cnf -revoke Server-localhost0h-sv.crt
Using configuration from EdelCurlRoot-ca.cnf
ERROR:Already revoked, serial number 66FDB23A
make: *** [../../../tests/certs/Server-localhost0h-sv.pem] Error 1

https://github.com/curl/curl/actions/runs/11151401083/job/30994755798?pr=15128#step:10:498

Follow-up to fa461b4 #14486
Follow-up to fa69b41 #13307

Fixes intermittend CI failure because the shell-based random generator
generated the same number twice:
```
$ openssl ca -config EdelCurlRoot-ca.cnf -revoke Server-localhost0h-sv.crt
Using configuration from EdelCurlRoot-ca.cnf
ERROR:Already revoked, serial number 66FDB23A
make: *** [../../../tests/certs/Server-localhost0h-sv.pem] Error 1
```
https://github.com/curl/curl/actions/runs/11151401083/job/30994755798?pr=15128#step:10:498

Follow-up to fa461b4 curl#14486
Follow-up to fa69b41 curl#13307
@vszakats vszakats added CI Continuous Integration tests labels Oct 2, 2024
@github-actions github-actions Bot added the script label Oct 2, 2024
@vszakats vszakats changed the title tests: let openssl generate random certs serials tests: let openssl generate random cert serials Oct 2, 2024
@vszakats vszakats added the TLS label Oct 2, 2024
@vszakats vszakats closed this in 9b0c0d6 Oct 2, 2024
@vszakats
vszakats deleted the crtserial branch October 2, 2024 23:19
vszakats added a commit to vszakats/curl that referenced this pull request Nov 1, 2024
Also:
- display openssl path and version.
- quote a string.

Follow-up to 9b0c0d6 curl#15129
vszakats added a commit that referenced this pull request Nov 1, 2024
Also:
- display openssl path and version.
- quote a string.

Follow-up to 9b0c0d6 #15129

Closes #15471
pps83 pushed a commit to pps83/curl that referenced this pull request Apr 26, 2025
Generate the certificate serial numbers automatically instead of doing
from shell (or Perl earlier).

Fixes intermittent CI failures due to the shell-based random generator
generating the same serial number twice:
```
$ openssl ca -config EdelCurlRoot-ca.cnf -revoke Server-localhost0h-sv.crt
Using configuration from EdelCurlRoot-ca.cnf
ERROR:Already revoked, serial number 66FDB23A
make: *** [../../../tests/certs/Server-localhost0h-sv.pem] Error 1
```
https://github.com/curl/curl/actions/runs/11151401083/job/30994755798?pr=15128#step:10:498

Follow-up to fa461b4 curl#14486
Follow-up to fa69b41 curl#13307
Closes curl#15129
pps83 pushed a commit to pps83/curl that referenced this pull request Apr 26, 2025
Also:
- display openssl path and version.
- quote a string.

Follow-up to 9b0c0d6 curl#15129

Closes curl#15471
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

CI Continuous Integration script tests TLS

Development

Successfully merging this pull request may close these issues.

1 participant