These are no longer an issue as the CI has been updated to softhsm
2.1.0, which addresses them, and they prevented catching the
GNUTLS-SA-2016-2 regression.
GNUTLS_PKCS11_OBJ_FLAG_MARK_CA|
GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO);
if (ret < 0) {
- /* FIXME: this is a known softhsm v2.0.0 bug - remove this once our testsuite is updated */
- fail_ignore("gnutls_pkcs11_copy_x509_crt: %s\n", gnutls_strerror(ret));
+ fail("gnutls_pkcs11_copy_x509_crt: %s\n", gnutls_strerror(ret));
}
gnutls_x509_trust_list_init(&tl, 0);
snprintf(name, sizeof(name), "test-ca%d", j);
ret = gnutls_pkcs11_copy_x509_crt(SOFTHSM_URL, certs[j], name, GNUTLS_PKCS11_OBJ_FLAG_MARK_TRUSTED|GNUTLS_PKCS11_OBJ_FLAG_MARK_CA|GNUTLS_PKCS11_OBJ_FLAG_LOGIN_SO);
if (ret < 0) {
- /* FIXME: this is a known softhsm v2.0.0 bug - remove this once our testsuite is updated */
- fail_ignore("gnutls_pkcs11_copy_x509_crt: %s\n", gnutls_strerror(ret));
+ fail("gnutls_pkcs11_copy_x509_crt: %s\n", gnutls_strerror(ret));
}
}