Skip to content

Commit 0d8180b

Browse files
committed
Tests: skip ssl_cache.t server certificate verify if not supported.
Without X509_V_FLAG_PARTIAL appeared in OpenSSL 1.0.2 and supported by Net::SSLeay (1.83+), it is not possible to use leaf certificates in the trust store as full trust anchors.
1 parent a40babd commit 0d8180b

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

ssl_cache.t

+3
Original file line numberDiff line numberDiff line change
@@ -184,6 +184,9 @@ like(http_get('/t'), qr/200 OK.*SUCCESS:.*1\.example\.com/s, 'proxy ssl');
184184
sub get {
185185
my ($port, $ca, $cert) = @_;
186186

187+
$ca = undef if $IO::Socket::SSL::VERSION < 2.062
188+
|| !eval { Net::SSLeay::X509_V_FLAG_PARTIAL_CHAIN() };
189+
187190
http_get('/t',
188191
PeerAddr => '127.0.0.1:' . port($port),
189192
SSL => 1,

0 commit comments

Comments
 (0)