pgpool2.git / summary / log / commit / refs

commit    3ad6c0c378006dffe2b052d4c68b5b6ec0819c96
Author:   Tatsuo Ishii <ishii@postgresql.org>
Date:     Sun Nov 24 11:10:28 2024 +0000

    Revert "Test: fix recent 024.cert_auth regression test failure."
    
    This reverts commit dd5a79aef8081bea74f9be7c4beb54ef34637ec9.
    
    The attempt to fix 024.cert_auth regression test failure on
    RockyLinux9 was not successful.


src/test/regression/tests/024.cert_auth/cert.sh | 4 ++-- src/test/regression/tests/024.cert_auth/test.sh | 9 +-------- 2 files changed, 3 insertions(+), 10 deletions(-) diff --git a/src/test/regression/tests/024.cert_auth/cert.sh b/src/test/regression/tests/024.cert_auth/cert.sh index dbc3cdcab..f50466bce 100755 --- a/src/test/regression/tests/024.cert_auth/cert.sh +++ b/src/test/regression/tests/024.cert_auth/cert.sh @@ -71,6 +71,6 @@ openssl ca -batch -in frontend.req -config crl_openssl.conf -days 375 -notext -m # Generate clean CRL (No revocation so far) openssl ca -gencrl -config crl_openssl.conf -out server.crl -cert root.crt -keyfile root.key # Revoke Frontend Cert -#openssl ca -revoke frontend.crt -config crl_openssl.conf -keyfile root.key -cert root.crt -out root.crl +openssl ca -revoke frontend.crt -config crl_openssl.conf -keyfile root.key -cert root.crt -out root.crl # Generate CRL after revocation -#openssl ca -gencrl -config crl_openssl.conf -out server_revoked.crl -cert root.crt -keyfile root.key +openssl ca -gencrl -config crl_openssl.conf -out server_revoked.crl -cert root.crt -keyfile root.key diff --git a/src/test/regression/tests/024.cert_auth/test.sh b/src/test/regression/tests/024.cert_auth/test.sh index 452301973..8f5082a0a 100755 --- a/src/test/regression/tests/024.cert_auth/test.sh +++ b/src/test/regression/tests/024.cert_auth/test.sh @@ -35,7 +35,7 @@ cp -p ../$SSL_KEY etc/ chmod og-rwx etc/$SSL_KEY cp -p ../$SSL_CRT etc/ cp -p ../$SSL_CRL etc/ -#cp -p ../$SSL_CRL2 etc/ +cp -p ../$SSL_CRL2 etc/ cp -p ../$ROOT_CRT etc/ echo "ssl = on" >> etc/pgpool.conf @@ -77,7 +77,6 @@ echo "Checking cert auth between Pgpool-II and frontend was ok." # Starting CRL verification - # Adding valid CRL file in pgpool.conf file. echo "ssl_crl_file = '$SSL_CRL'" >> etc/pgpool.conf @@ -117,12 +116,6 @@ echo "Checking cert auth between Pgpool-II and frontend with clean CRL was ok." # Adding CRL file with revoked certification entry in pgpool.conf file. echo "Updating pgpool.conf with revoked CRL file" -# Revoke Frontend Cert -(cd ..;openssl ca -revoke frontend.crt -config crl_openssl.conf -keyfile root.key -cert root.crt -out root.crl) -# Generate CRL after revocation -(cd ..; openssl ca -gencrl -config crl_openssl.conf -out server_revoked.crl -cert root.crt -keyfile root.key) -cp -p ../$SSL_CRL2 etc/ - sed -i 's/server.crl/server_revoked.crl/' etc/pgpool.conf # Check pgpool configuration is updated successfully [parent: dd5a79aef808]