Skip to content

Commit b75a925

Browse files
lucaskanashirosorah
authored andcommitted
Set OPENSSL_CONF to lower security level to 1
It allows tests pass with weak keys.
1 parent 0d8ad07 commit b75a925

File tree

3 files changed

+10
-1
lines changed

3 files changed

+10
-1
lines changed

debian/openssl.cnf

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
openssl_conf = default_conf
2+
[default_conf]
3+
ssl_conf = ssl_sect
4+
[ssl_sect]
5+
system_default = system_default_sect
6+
[system_default_sect]
7+
CipherString = DEFAULT@SECLEVEL=1

debian/rules

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ excludes += --excludes-dir=debian/tests/excludes/any/
8686
excludes += --excludes-dir=debian/tests/excludes/$(DEB_HOST_ARCH)/
8787
override_dh_auto_test-arch:
8888
ifeq (,$(filter nocheck,$(DEB_BUILD_OPTIONS)))
89-
$(MAKE) TESTS="-v -j 4 $(excludes)" RUBY_TESTOPTS=-v V=1 check
89+
$(MAKE) TESTS="-v -j 4 $(excludes)" RUBY_TESTOPTS=-v V=1 OPENSSL_CONF=$(CURDIR)/debian/openssl.cnf check
9090
endif
9191

9292
override_dh_auto_install-arch:

debian/tests/run-all

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -5,6 +5,8 @@ set -e
55
#set -x
66

77
KNOW_FAILURES=$(dirname $(readlink -f $0))/known-failures.txt
8+
# test against the default OpenSSL settings and not the Debian-specific ones
9+
export OPENSSL_CONF=`pwd`/debian/openssl.cnf
810

911
tests="$@"
1012

0 commit comments

Comments
 (0)