From 8ed5a82a973922d07d0610fd42c48b2a0ec97d6c Mon Sep 17 00:00:00 2001 From: Alexander Scheel Date: Wed, 1 Jul 2020 12:44:53 -0400 Subject: [PATCH] Remove all legacy DSS/DSA tests The only signature algorithm suppoted with DSS is SHA-1, which will soon become deprecated and broken. DSS itself isn't widely used either, so we should remove it from the test suite as well. Signed-off-by: Alexander Scheel --- cmake/JSSTests.cmake | 12 +----------- 1 file changed, 1 insertion(+), 11 deletions(-) diff --git a/cmake/JSSTests.cmake b/cmake/JSSTests.cmake index a26b95425..a0fe36e22 100644 --- a/cmake/JSSTests.cmake +++ b/cmake/JSSTests.cmake @@ -170,11 +170,6 @@ macro(jss_tests) COMMAND "org.mozilla.jss.tests.GenerateTestCert" "${RESULTS_NSSDB_OUTPUT_DIR}" "${PASSWORD_FILE}" "30" "localhost" "SHA-256/EC" "CA_ECDSA" "Server_ECDSA" "Client_ECDSA" DEPENDS "Generate_known_RSA_cert_pair" ) - jss_test_java( - NAME "Generate_known_DSS_cert_pair" - COMMAND "org.mozilla.jss.tests.GenerateTestCert" "${RESULTS_NSSDB_OUTPUT_DIR}" "${PASSWORD_FILE}" "40" "localhost" "SHA-1/DSA" "CA_DSS" "Server_DSS" "Client_DSS" - DEPENDS "Generate_known_ECDSA_cert_pair" - ) jss_test_exec( NAME "Create_PKCS11_cert_to_PKCS12_rsa.pfx" COMMAND "pk12util" "-o" "${RESULTS_NSSDB_OUTPUT_DIR}/rsa.pfx" "-n" "CA_RSA" "-d" "${RESULTS_NSSDB_OUTPUT_DIR}" "-K" "${DB_PWD}" "-W" "${DB_PWD}" @@ -185,15 +180,10 @@ macro(jss_tests) COMMAND "pk12util" "-o" "${RESULTS_NSSDB_OUTPUT_DIR}/ecdsa.pfx" "-n" "CA_ECDSA" "-d" "${RESULTS_NSSDB_OUTPUT_DIR}" "-K" "${DB_PWD}" "-W" "${DB_PWD}" DEPENDS "Generate_known_ECDSA_cert_pair" ) - jss_test_exec( - NAME "Create_PKCS11_cert_to_PKCS12_dss.pfx" - COMMAND "pk12util" "-o" "${RESULTS_NSSDB_OUTPUT_DIR}/dss.pfx" "-n" "CA_DSS" "-d" "${RESULTS_NSSDB_OUTPUT_DIR}" "-K" "${DB_PWD}" "-W" "${DB_PWD}" - DEPENDS "Generate_known_DSS_cert_pair" - ) jss_test_java( NAME "List_CA_certs" COMMAND "org.mozilla.jss.tests.ListCACerts" "${RESULTS_NSSDB_OUTPUT_DIR}" "Verbose" - DEPENDS "Generate_known_DSS_cert_pair" + DEPENDS "Generate_known_ECDSA_cert_pair" ) jss_test_java( NAME "SSLClientAuth"