diff options
| author | Caleb ツ Everett <calebev@amazon.com> | 2019-06-28 11:11:39 -0700 |
|---|---|---|
| committer | Rich Trott <rtrott@gmail.com> | 2019-07-05 22:39:22 -0700 |
| commit | 6aafee1771ae266c8f2a6d25d92f7cc3dd417b3b (patch) | |
| tree | 9ecda1a077e884e7d88bc41320373a02671002f6 /test/fixtures/keys | |
| parent | ba565a37349e81c9d2402b0c8ef05ab39dca8968 (diff) | |
| download | android-node-v8-6aafee1771ae266c8f2a6d25d92f7cc3dd417b3b.tar.gz android-node-v8-6aafee1771ae266c8f2a6d25d92f7cc3dd417b3b.tar.bz2 android-node-v8-6aafee1771ae266c8f2a6d25d92f7cc3dd417b3b.zip | |
test: generate des rsa_cert.pfx
My node distribution uses a shared openssl library with some ciphers
disabled, including RC2.
These tests (which use `rsa_cert.pfx`) fail with `unknown cipher`:
- parallel/test-crypto-binary-default
- parallel/test-https-pfx
- parallel/test-crypto
The other fixture .pfx's use the `-descert` option, I don't know if
rsa_cert.pfx was generated without `-descert` intentionally or not but
none of the tests reference RC2, and the tests pass with a des cert.
I'm not an ssl/crypto expert, so I would appreciate any insight.
Old key:
```
openssl pkcs12 -info -in test/fixtures/keys/rsa_cert.pfx -noout -passin
pass:sample
MAC Iteration 2048
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And40BitRC2-CBC, Iteration 2048
Certificate bag
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
```
New
```
openssl pkcs12 -info -in test/fixtures/keys/rsa_cert.pfx -noout -passin
pass:sample
MAC Iteration 2048
MAC verified OK
PKCS7 Encrypted data: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
Certificate bag
PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
```
PR-URL: https://github.com/nodejs/node/pull/28471
Reviewed-By: Ben Noordhuis <info@bnoordhuis.nl>
Reviewed-By: Rich Trott <rtrott@gmail.com>
Diffstat (limited to 'test/fixtures/keys')
| -rw-r--r-- | test/fixtures/keys/Makefile | 2 | ||||
| -rw-r--r-- | test/fixtures/keys/rsa_cert.pfx | bin | 2629 -> 2629 bytes |
2 files changed, 1 insertions, 1 deletions
diff --git a/test/fixtures/keys/Makefile b/test/fixtures/keys/Makefile index 226dc67346..824704c724 100644 --- a/test/fixtures/keys/Makefile +++ b/test/fixtures/keys/Makefile @@ -631,7 +631,7 @@ rsa_cert.crt: rsa_private.pem openssl req -new -x509 -days 99999 -key rsa_private.pem -config rsa_cert.cnf -out rsa_cert.crt rsa_cert.pfx: rsa_cert.crt - openssl pkcs12 -export -passout 'pass:sample' -inkey rsa_private.pem -in rsa_cert.crt -out rsa_cert.pfx + openssl pkcs12 -export -descert -passout 'pass:sample' -inkey rsa_private.pem -in rsa_cert.crt -out rsa_cert.pfx rsa_ca.crt: rsa_cert.crt cp rsa_cert.crt rsa_ca.crt diff --git a/test/fixtures/keys/rsa_cert.pfx b/test/fixtures/keys/rsa_cert.pfx Binary files differindex 66cbb14842..aef85e2e28 100644 --- a/test/fixtures/keys/rsa_cert.pfx +++ b/test/fixtures/keys/rsa_cert.pfx |