]> git.ipfire.org Git - thirdparty/pdns.git/commit
projects / thirdparty / pdns.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 788f396) | patch
dnsdist: Fix regression tests with Python 3.13 15003/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 30 Dec 2024 14:55:33 +0000 (15:55 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 30 Dec 2024 14:55:33 +0000 (15:55 +0100)
commit98ef889a9232877ac369b67c11922bab92ab84a9
tree525d01b84f4762cd5817a0f5aad948b77b66914btree
parent788f396a78120c6c9ec0c5466fdfaa45b9145ce1commit | diff
dnsdist: Fix regression tests with Python 3.13

The CA certificates that we are generating as par of our regression tests
were lacking the X.509 `Key Usage` extension, causing TLS validation with
Python 3.13 to fail with:

> certificate verify failed: CA cert does not include key usage extension

It appears that Python 3.13 enables `VERIFY_X509_STRICT` by default, which makes OpenSSL stricter, and thus it chokes on our invalid CA.
regression-tests.dnsdist/configCA.conf diff | blob | blame | history
Unnamed repository; edit this file 'description' to name the repository.