]> git.ipfire.org Git - thirdparty/curl.git/commit
tests: test mtls also w/ clientAuth EKU only
authorYedaya Katsman <yedaya.ka@gmail.com>
Fri, 30 May 2025 15:59:14 +0000 (18:59 +0300)
committerDaniel Stenberg <daniel@haxx.se>
Sat, 31 May 2025 13:20:25 +0000 (15:20 +0200)
commit2cf19c245eff8ff84e53d6edc27d36bf25439d1b
tree790934f16c50912f8e4940cc707ae6474b0e2a26
parentb53848738c2f9680ffe52f97fb8c6a6df81b2748
tests: test mtls also w/ clientAuth EKU only

The google chrome root program will stop allowing roots that have both
clientAuth and ServerAuth [1].

In one of the mtls tests, use a certificate with only the clientAuth
EKU.

[1] https://googlechrome.github.io/chromerootprogram/#322-pki-hierarchies-included-in-the-chrome-root-store

Closes #17493
tests/certs/Makefile.inc
tests/certs/test-client-eku-only.prm [new file with mode: 0644]
tests/data/test2088