1
0
mirror of https://github.com/openbsd/src.git synced 2026-04-30 00:56:33 +00:00

regress tests for iPAddress certificates, from florian

This commit is contained in:
sthen
2026-02-23 10:28:23 +00:00
parent 4f09c169eb
commit 4553a27546
2 changed files with 47 additions and 1 deletions

View File

@@ -1,4 +1,4 @@
# $OpenBSD: Makefile,v 1.5 2025/09/16 15:12:50 sthen Exp $
# $OpenBSD: Makefile,v 1.6 2026/02/23 10:28:23 sthen Exp $
# Copyright (c) 2017 Alexander Bluhm <bluhm@openbsd.org>
#
@@ -40,6 +40,12 @@ etc/acme-client-profile.conf: acme-client-profile.conf
${.CURDIR}/acme-client-profile.conf \
> etc/acme-client-profile.conf
etc/acme-client-ipaddress.conf: acme-client-ipaddress.conf
mkdir -p etc
sed 's,$${.OBJDIR},${.OBJDIR},'\
${.CURDIR}/acme-client-ipaddress.conf \
> etc/acme-client-ipaddress.conf
etc/httpd.conf: httpd.conf
mkdir -p etc
sed 's,$${.OBJDIR},${.OBJDIR},'\
@@ -85,6 +91,24 @@ run-regress-acme-profile: etc/acme-client-profile.conf
-f ${.OBJDIR}/etc/acme-client-profile.conf \
-r -v localhost
REGRESS_TARGETS += run-regress-acme-ipaddress
run-regress-acme-ipaddress: etc/acme-client-ipaddress.conf
${SUDO} /usr/sbin/acme-client \
-f ${.OBJDIR}/etc/acme-client-ipaddress.conf \
-v localhost
${SUDO} /usr/sbin/acme-client \
-f ${.OBJDIR}/etc/acme-client-ipaddress.conf \
-r -v localhost
REGRESS_TARGETS += run-regress-acme-ipaddress2
run-regress-acme-ipaddress2: etc/acme-client-ipaddress.conf
${SUDO} /usr/sbin/acme-client \
-f ${.OBJDIR}/etc/acme-client-ipaddress.conf \
-v ::1
${SUDO} /usr/sbin/acme-client \
-f ${.OBJDIR}/etc/acme-client-ipaddress.conf \
-r -v ::1
REGRESS_TARGETS += run-regress-cleanup
run-regress-cleanup:
${.MAKE} -C ${.CURDIR} httpd-stop

View File

@@ -0,0 +1,22 @@
authority pebble {
account key "${.OBJDIR}/etc/acme/privkey.pem"
api url https://127.0.0.1:14000/dir
insecure
}
domain localhost {
domain key "${.OBJDIR}/etc/ssl/acme/private/privkey.pem"
domain certificate "${.OBJDIR}/etc/ssl/acme/cert.pem"
domain name 127.0.0.1
alternative names {::1, "localhost"}
profile "shortlived"
sign with "pebble"
challengedir "${.OBJDIR}/www/acme"
}
domain ::1 {
domain key "${.OBJDIR}/etc/ssl/acme/private/privkey2.pem"
domain certificate "${.OBJDIR}/etc/ssl/acme/cert2.pem"
profile "shortlived"
sign with "pebble"
challengedir "${.OBJDIR}/www/acme"
}