test/openssl/test_ssl: fix illegal SAN extension

rhenium · rhenium · commit 558cfbe5f503 · 2021-10-22T17:16:07.000+09:00
A certificate can only have one SubjectAltName extension. OpenSSL 3.0
performs a stricter validation and certificates containing multiple SANs
will be rejected.
diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb
@@ -593,8 +593,7 @@ def test_post_connection_check
 
     exts = [
       ["keyUsage","keyEncipherment,digitalSignature",true],
-      ["subjectAltName","DNS:localhost.localdomain",false],
-      ["subjectAltName","IP:127.0.0.1",false],
+      ["subjectAltName","DNS:localhost.localdomain,IP:127.0.0.1",false],
     ]
     @svr_cert = issue_cert(@svr, @svr_key, 4, exts, @ca_cert, @ca_key)
     start_server { |port|

Original file line number	Diff line number	Diff line change
`@@ -593,8 +593,7 @@ def test_post_connection_check`
`593`	`593`
`594`	`594`	`exts = [`
`595`	`595`	`["keyUsage","keyEncipherment,digitalSignature",true],`
`596`		`- ["subjectAltName","DNS:localhost.localdomain",false],`
`597`		`- ["subjectAltName","IP:127.0.0.1",false],`
	`596`	`+ ["subjectAltName","DNS:localhost.localdomain,IP:127.0.0.1",false],`
`598`	`597`	`]`
`599`	`598`	`@svr_cert = issue_cert(@svr, @svr_key, 4, exts, @ca_cert, @ca_key)`
`600`	`599`	`start_server { \|port\|`