- djm@cvs.openbsd.org 2013/11/21 03:15:46

     [regress/krl.sh]
     add some reminders for additional tests that I'd like to implement

diff --git a/ChangeLog b/ChangeLog
index 1f39b76e3a88b472afa5dc456b4206bc36400560..29ba4273b1b07af3d5f40e89c0fe803b2b593d13 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -40,6 +40,9 @@
      [regress/forward-control.sh]
      bump timeout to 10 seconds to allow slow machines (e.g. Alpha PC164)
      to successfully run this; ok djm@
+   - djm@cvs.openbsd.org 2013/11/21 03:15:46
+     [regress/krl.sh]
+     add some reminders for additional tests that I'd like to implement
 
 20131110
  - (dtucker) [regress/keytype.sh] Populate ECDSA key types to be tested by

diff --git a/regress/krl.sh b/regress/krl.sh
index de9cc8764de13049a55f86aabb53ea3528cc1698..09246371c558103843d61020ad556dd028249810 100644 (file)
--- a/regress/krl.sh
+++ b/regress/krl.sh
@@ -1,4 +1,4 @@
-#      $OpenBSD: krl.sh,v 1.1 2013/01/18 00:45:29 djm Exp $
+#      $OpenBSD: krl.sh,v 1.2 2013/11/21 03:15:46 djm Exp $
 #      Placed in the Public Domain.
 
 tid="key revocation lists"
@@ -101,6 +101,9 @@ $SSHKEYGEN $OPTS -kf $OBJ/krl-keyid -s $OBJ/revoked-ca.pub $OBJ/revoked-keyid \
        >/dev/null || fatal "$SSHKEYGEN KRL failed"
 }
 
+## XXX dump with trace and grep for set cert serials
+## XXX test ranges near (u64)-1, etc.
+
 verbose "$tid: generating KRLs"
 genkrls