mirror of
https://github.com/ruby/ruby.git
synced 2025-08-15 13:39:04 +02:00
c78721f718
RFC 2986, section 4.1 only defines version 1 for CSRs. This version
is encoded as a 0. Starting with OpenSSL 3.3, setting the CSR version
to anything but 1 fails.
Do not attempt to generate a CSR with invalid version (which now fails)
and invalidate the CSR in test_sign_and_verify_rsa_sha1 by changing its
subject rather than using an invalid version.
This commit fixes the following error.
```
2) Error: test_version(OpenSSL::TestX509Request): OpenSSL::X509::RequestError:
X509_REQ_set_version: passed invalid argument
/home/runner/work/openssl/openssl/test/openssl/test_x509req.rb:18:in `version='
/home/runner/work/openssl/openssl/test/openssl/test_x509req.rb:18:in `issue_csr'
/home/runner/work/openssl/openssl/test/openssl/test_x509req.rb:43:in
`test_version'
40: req = OpenSSL::X509::Request.new(req.to_der)
41: assert_equal(0, req.version)
42:
=> 43: req = issue_csr(1, @dn, @rsa1024, OpenSSL::Digest.new('SHA256'))
44: assert_equal(1, req.version)
45: req = OpenSSL::X509::Request.new(req.to_der)
46: assert_equal(1, req.version)
```
|
||
|---|---|---|
| .. | ||
| fixtures/pkey | ||
| test_asn1.rb | ||
| test_bn.rb | ||
| test_buffering.rb | ||
| test_cipher.rb | ||
| test_config.rb | ||
| test_digest.rb | ||
| test_engine.rb | ||
| test_fips.rb | ||
| test_hmac.rb | ||
| test_kdf.rb | ||
| test_ns_spki.rb | ||
| test_ocsp.rb | ||
| test_ossl.rb | ||
| test_pair.rb | ||
| test_pkcs7.rb | ||
| test_pkcs12.rb | ||
| test_pkey.rb | ||
| test_pkey_dh.rb | ||
| test_pkey_dsa.rb | ||
| test_pkey_ec.rb | ||
| test_pkey_rsa.rb | ||
| test_provider.rb | ||
| test_random.rb | ||
| test_ssl.rb | ||
| test_ssl_session.rb | ||
| test_ts.rb | ||
| test_x509attr.rb | ||
| test_x509cert.rb | ||
| test_x509crl.rb | ||
| test_x509ext.rb | ||
| test_x509name.rb | ||
| test_x509req.rb | ||
| test_x509store.rb | ||
| ut_eof.rb | ||
| utils.rb | ||