]> wagner.pp.ru Git - openssl-gost/engine.git/commitdiff
tcl_tests: ca.try: Ignore openssl crl exit status for 'corrupted CRL' test master
authorVitaly Chikunov <vt@altlinux.org>
Fri, 22 Mar 2024 02:20:50 +0000 (05:20 +0300)
committerVitaly Chikunov <vt@altlinux.org>
Fri, 22 Mar 2024 02:47:37 +0000 (05:47 +0300)
Older `openssl crl` exits with 0 in regard to verify no matter actual verify
status, newer `openssl crl` could exit with 1 on verify failure. Make the test
backward-compatible comparing only an output.

Fixes: https://github.com/gost-engine/engine/issues/452
Signed-off-by: Vitaly Chikunov <vt@altlinux.org>
tcl_tests/ca.try

index 249923b2f9558849ffae2a264e0e8af3678dcd11..7da25de2eae2691dcc10e72f944d38a65301d4d2 100644 (file)
@@ -88,8 +88,7 @@ test -skip {![file exists test.crl]} "Verifying CRL OK" {
 test -skip {![file exists test.crl]} "Verifying corrupted CRL" {
        makeFile "badcrl.pem" [hackPem "\01\x1E" [getFile test.crl] "\01\0"]
        grep verify [openssl "crl -in badcrl.pem -noout -CAfile $::test::ca/cacert.pem"]
 test -skip {![file exists test.crl]} "Verifying corrupted CRL" {
        makeFile "badcrl.pem" [hackPem "\01\x1E" [getFile test.crl] "\01\0"]
        grep verify [openssl "crl -in badcrl.pem -noout -CAfile $::test::ca/cacert.pem"]
-} 0 "verify failure
-"
+} -1 "verify failure"
 
 test "Verifying CA certificate" {
        grep "(cacert.pem|error|OK)" [openssl "verify -CAfile $::test::ca/cacert.pem $::test::ca/cacert.pem"]
 
 test "Verifying CA certificate" {
        grep "(cacert.pem|error|OK)" [openssl "verify -CAfile $::test::ca/cacert.pem $::test::ca/cacert.pem"]