Generate test CA and certificates in rake#958
Conversation
|
FYI: I didn't get master to compile in docker for 2.2 or 2.3. Perhaps the github actions set things up better than the official docker images? |
|
Maybe run GitHub Actions in your fork? |
|
Ah, thanks. Took me a minute to figure out how to run actions from my phone 🙃 And I see you have your own Ruby setup action, which makes sense, since none of the others seem to work with old ruby & old openssl. Anyway, they all passed except for a MacOS 2.6 🤔https://github.com/nevans/eventmachine/runs/4198820287?check_suite_focus=true |
|
Glad you got Actions running. Not sure about the macOS issue...
MSP-Greg/setup-ruby-pkgs uses the code from ruby/setup-ruby to install Ruby, it just adds the ability to install packages, in this case, openssl on Windows. It also works with apt and brew. I've helped several repos convert to Actions, as it runs a high number of concurrent jobs, often speeding up CI... |
|
Well, they're all passing now! Flaky test? Could the private keys be generated in such a way that key[100] is insignificant? If so, perhaps something like the following could be less flaky? idx = badkey.length / 2
badkey[idx] = badkey[idx].tr("A-Za-z", "N-ZA-Mn-za-m") |
|
(that specific |
nevans
force-pushed
the
generate-test-certs
branch
from
3ead025 to
aa112b6
Compare
nevans
force-pushed
the
generate-test-certs
branch
from
aa112b6 to
8fd5036
Compare
As part of tidying up the SSL implementation, I'm updating all of the tests to use secure defaults. This commit doesn't enable certificate verification or identity verification, yet. This just adds a little bit of infrastructure for quickly testing several different SSL scenarios. Currently, it's just a single CA which has signed a single "localhost" certificate. I'll update it to use intermediate certs and multiple hostnames, etc, in future PRs.
nevans
force-pushed
the
generate-test-certs
branch
from
8fd5036 to
4851031
Compare
3 participants
As part of tidying up the SSL implementation, I'm updating all of the
tests to use secure defaults. This commit doesn't enable certificate
verification or identity verification, yet. This just adds a little bit
of infrastructure for quickly testing several different SSL scenarios.
Currently, it's just a single CA which has signed a single "localhost"
certificate. I'll update it to use intermediate certs and multiple
hostnames, etc, in future PRs.