Skip to content

Commit 756c6b3

Browse files
committed
Fix OCSP tests on Fedora and derivatives. It turns out we were signing OCSP
responses with SHA-1, which is disabled in OpenSSL builds on those platforms. In addition, perform three *headbang*s for not catching this when I refreshed the test certificates to also not use SHA-1. My wall is now slightly dented. * test/test_ssl.c (create_ocsp_response): Use EVP_sha256() instead of EVP_sha1(). git-svn-id: https://svn.apache.org/repos/asf/serf/trunk@1931292 13f79535-47bb-0310-9956-ffa450edef68
1 parent dd9edf4 commit 756c6b3

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

test/test_ssl.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2630,7 +2630,7 @@ static void create_ocsp_response(CuTest *tc,
26302630
}
26312631

26322632
if (!OCSP_basic_sign(basic, signer_cert, pkey,
2633-
EVP_sha1(), ca, 0)) {
2633+
EVP_sha256(), ca, 0)) {
26342634
sk_X509_free(ca);
26352635
goto cleanup;
26362636
}

0 commit comments

Comments
 (0)