gnutls-devel
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: 2.7.12 test suite error on chainverify


From: Simon Josefsson
Subject: Re: 2.7.12 test suite error on chainverify
Date: Tue, 26 May 2009 11:08:36 +0200
User-agent: Gnus/5.110011 (No Gnus v0.11) Emacs/23.0.93 (gnu/linux)

Daniel Kahn Gillmor <address@hidden> writes:

> On 05/25/2009 04:05 AM, Simon Josefsson wrote:
>> Indeed, that certificate just expired.  I have split the test into two,
>> one that should fail due to an expired certificate, and one with a flag
>> to disable activation time checks that should succeed.  There was
>> another similar one too.
>
> Perhaps the tests could run with something like faketime or datefudge to
> ensure that the date validations are reasonable?

This is kind of tested now, isn't it?  I split the test into two parts:
one that is expected to fail because of an expired cert, and one that is
expected to succeed (because time checks are disabled).

But using datefudge or something similar seems useful for improving the
chain validation test further.

/Simon




reply via email to

[Prev in Thread] Current Thread [Next in Thread]