010cc6087f
- Certificate format validation when adding the SCEP server's CA (#1492112) - Replace some SHA1 usages with SHA256 in the unit tests needed becaus of OpenSSL 3 update Resolves: #1492112
47 lines
1.2 KiB
Diff
47 lines
1.2 KiB
Diff
From 2ef0a885962ecf558a8080b19652a5bd0c11c228 Mon Sep 17 00:00:00 2001
|
|
From: Rob Crittenden <rcritten@redhat.com>
|
|
Date: Thu, 17 Mar 2022 15:44:00 -0400
|
|
Subject: [PATCH] Remove dependency on SHA-1
|
|
|
|
---
|
|
tests/033-scep/run.sh | 4 ++--
|
|
tests/tools/cachain.sh | 2 +-
|
|
2 files changed, 3 insertions(+), 3 deletions(-)
|
|
|
|
diff --git a/tests/033-scep/run.sh b/tests/033-scep/run.sh
|
|
index a36cd5a..baaa581 100755
|
|
--- a/tests/033-scep/run.sh
|
|
+++ b/tests/033-scep/run.sh
|
|
@@ -148,7 +148,7 @@ check_nonce
|
|
check_digest sha256
|
|
echo OK
|
|
echo "[gic, old trust root]"
|
|
-set_digest sha1
|
|
+set_digest sha256
|
|
$toolsdir/scepgen ca entry > scepdata
|
|
if test x`grep ^gic: scepdata | cut -f2- -d:` = x ; then
|
|
echo missing gic
|
|
@@ -158,7 +158,7 @@ check_verified
|
|
check_msgtype $SCEP_MSGTYPE_GETCERTINITIAL
|
|
check_txid
|
|
check_nonce
|
|
-check_digest sha1
|
|
+check_digest sha256
|
|
echo OK
|
|
echo "[req next, no trust root]"
|
|
if test x`grep ^req.next.: scepdata | cut -f2- -d:` = x ; then
|
|
diff --git a/tests/tools/cachain.sh b/tests/tools/cachain.sh
|
|
index 58f0c49..93aca9b 100755
|
|
--- a/tests/tools/cachain.sh
|
|
+++ b/tests/tools/cachain.sh
|
|
@@ -1,5 +1,5 @@
|
|
#!/bin/bash -e
|
|
-digest=sha1
|
|
+digest=sha256
|
|
keytype=rsa:1024
|
|
serial=12345678
|
|
cat > openssl.cnf << EOF
|
|
--
|
|
2.31.1
|
|
|