Skip to content

Replace existing autest certs with ones from master #7244

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
zwoop merged 1 commit into from
Oct 8, 2020
Merged

Replace existing autest certs with ones from master #7244

zwoop merged 1 commit into from
Oct 8, 2020

Conversation

@ezelkow1
Copy link
Member

@ezelkow1 ezelkow1 commented Oct 6, 2020 •
edited
Loading

These are considered insecure by more recent versions of openssl and will fail to load

While attempting to do a CentOS 8 build with 8.1.x I ran into a couple issues.

  1. AuTest currently does centos7 specific things for all centos (I will have another PR for these)
  2. The current certs for tests and for microserver are 1024 and so the centos8 openssl will not load them
  3. The tls_client_versions test still fails. This is due to centos8 by default restriction of tls to v1.2 and higher. I am still looking in to this so if I come up with a fix for it within AuTest itself I will be combing it with 1

This PR handles the 2nd issue

@ezelkow1
Replace existing autest certs with ones from master. These are consid…
a86ac8d 
…ered insecure by more recent versions of openssl and will fail to load

Update microserver crt and pem files

Modify microserver certs to be 2048
@ezelkow1 ezelkow1 added the AuTest label Oct 6, 2020
@ezelkow1 ezelkow1 added this to the 8.1.1 milestone Oct 6, 2020
@ezelkow1 ezelkow1 self-assigned this Oct 6, 2020
@ezelkow1 ezelkow1 changed the title Replace existing autest certs with ones from master.… Replace existing autest certs with ones from master Oct 6, 2020
@ezelkow1 ezelkow1 requested a review from zwoop October 7, 2020 15:22
@zwoop zwoop merged commit 5494225 into apache:8.1.x Oct 8, 2020
masaori335 pushed a commit to masaori335/trafficserver that referenced this pull request Mar 31, 2021
@zwoop
Merge remote-tracking branch 'asf/8.1.x' into 8.1.x
2225f6d 
* asf/8.1.x:
  Updated ChangeLog
  Replace existing autest certs with ones from master. These are considered insecure by more recent versions of openssl and will fail to load (apache#7244)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@zwoop zwoop Awaiting requested review from zwoop

Assignees

@ezelkow1 ezelkow1

Labels

AuTest

Projects

None yet

Milestone

8.1.1

Development

Successfully merging this pull request may close these issues.

2 participants

@ezelkow1 @zwoop