]> git.ipfire.org Git - thirdparty/pdns.git/commit
dnsdist: Fix regression tests with Python 3.13 15498/head
authorRemi Gacogne <remi.gacogne@powerdns.com>
Mon, 30 Dec 2024 14:55:33 +0000 (15:55 +0100)
committerRemi Gacogne <remi.gacogne@powerdns.com>
Wed, 30 Apr 2025 09:18:51 +0000 (11:18 +0200)
commit5787ffad38d920d972c683e5ef500a595aca4fec
tree0f8a435889a4e64927b6d457f690f27fb7cb2f52
parent18d1656b232e3d9ed907b8df2257285c12a5ef1d
dnsdist: Fix regression tests with Python 3.13

The CA certificates that we are generating as par of our regression tests
were lacking the X.509 `Key Usage` extension, causing TLS validation with
Python 3.13 to fail with:

> certificate verify failed: CA cert does not include key usage extension

It appears that Python 3.13 enables `VERIFY_X509_STRICT` by default, which makes OpenSSL stricter, and thus it chokes on our invalid CA.

(cherry picked from commit 98ef889a9232877ac369b67c11922bab92ab84a9)
regression-tests.dnsdist/configCA.conf