diff options
| author | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-07 19:37:46 +0100 |
|---|---|---|
| committer | Dr. David von Oheimb <David.von.Oheimb@siemens.com> | 2020-12-10 15:19:55 +0100 |
| commit | 1a683b80dc9ad4dcbf206a0617364a9d614a9883 (patch) | |
| tree | 489d4cc0bfbb0664cd692e95ab0c175aa8b3ebd3 /test/recipes | |
| parent | openssl_hexstr2buf_sep(): Prevent misleading 'malloc failure' errors on short... (diff) | |
| download | openssl-1a683b80dc9ad4dcbf206a0617364a9d614a9883.tar.xz openssl-1a683b80dc9ad4dcbf206a0617364a9d614a9883.zip | |
apps/{ca,req,x509}.c: Improve diag and doc mostly on X.509 extensions, fix multiple instances
This includes a general correction in the code (now using the X509V3_CTX_REPLACE flag)
and adding a prominent clarification in the documentation:
If multiple entries are processed for the same extension name,
later entries override earlier ones with the same name.
This is due to an RFC 5280 requirement - the intro of its section 4.2 says:
A certificate MUST NOT include more than one instance of a particular extension.
Reviewed-by: Tomas Mraz <tmraz@fedoraproject.org>
(Merged from https://github.com/openssl/openssl/pull/13614)
Diffstat (limited to 'test/recipes')
| -rw-r--r-- | test/recipes/25-test_x509.t | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/recipes/25-test_x509.t b/test/recipes/25-test_x509.t index 54fbe78e96..19ff335f82 100644 --- a/test/recipes/25-test_x509.t +++ b/test/recipes/25-test_x509.t @@ -126,7 +126,7 @@ sub test_errors { # actually tests diagnostics of OSSL_STORE # 3 tests for non-existence of spurious OSSL_STORE ASN.1 parse error output. # This requires provoking a failure exit of the app after reading input files. -ok(test_errors("bad output format", "root-cert.pem", '-outform', 'http'), +ok(test_errors("Bad output format", "root-cert.pem", '-outform', 'http'), "load root-cert errors"); ok(test_errors("RC2-40-CBC", "v3-certs-RC2.p12", '-passin', 'pass:v3-certs'), "load v3-certs-RC2 no asn1 errors"); # error msg should mention "RC2-40-CBC" |