]> git.ipfire.org Git - thirdparty/openssl.git/commit
Add last missing TLSA usage/selector/mtype test case
authorViktor Dukhovni <openssl-users@dukhovni.org>
Mon, 27 Nov 2023 16:23:54 +0000 (11:23 -0500)
committerTomas Mraz <tomas@openssl.org>
Wed, 29 Nov 2023 09:31:42 +0000 (10:31 +0100)
commitc8fe4b5948486e792016208f7c8ccea9c380f354
tree4f5e5b6cb9027549bfc66a27bd78832d85992e84
parentf636e7e6bd8e06c6d84e42729b4131b4f5df488f
Add last missing TLSA usage/selector/mtype test case

There were no PKIX-TA(0) SPKI(1) Full(0) (i.e. "0 1 0") test cases in
"danetest.in".

There is now at least a success case, which will exercise freeing the public
key after it is sanity checked, since with PKIX-TA(0) there's nothing we can do
with just the raw public key, a full chain to a local trust anchor is in any
case required.

The failure (to match) code path is already well oiled, but failure to decode
while adding malfored TLSA records could still use some additional tests...

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Bernd Edlinger <bernd.edlinger@hotmail.de>
Reviewed-by: Richard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/22821)
test/danetest.in