tests: ignore sanity checks in broken cert test

This allows the existing reproducers which contain certificates which
are rejected by sanity checks, to still be used to detect regressions.

Signed-off-by: Nikos Mavrogiannopoulos <nmav@redhat.com>

diff --git a/tests/cert.c b/tests/cert.c
index d92a090c7ac9ab8eb2824c3b2fc0b7433b8bc75c..da0ab23df4f75537f87c17ade3add95f5b573a15 100644 (file)
--- a/tests/cert.c
+++ b/tests/cert.c
@@ -116,6 +116,8 @@ void doit(void)
                if (ret < 0)
                        fail("crt_init %d\n", ret);
 
+               gnutls_x509_crt_set_flags(cert, GNUTLS_X509_CRT_FLAG_IGNORE_SANITY);
+
                ret = gnutls_x509_crt_import(cert, &der, GNUTLS_X509_FMT_DER);
                if (ret != exp_ret) {
                        fail("crt_import %s\n", gnutls_strerror(ret));