Skip to content

Commit aedae20

Browse files
committed
Tests: fixed hostname verification in ssl_certificate_chain.t.
ssl_certificate_chain.t doesn't supply the hostname expected in a tested certificate, which causes IO::Socket::SSL to fall back to an IP address given in PeerAddr. As of IO::Socket::SSL 2.078, verification enabled by default for such hostnames [1] results in "hostname verification failed" errors. To keep tests simple, the IP address is now included in subjectAltName. [1] noxxi/p5-io-socket-ssl#121
1 parent ac955b2 commit aedae20

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

ssl_certificate_chain.t

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -97,6 +97,7 @@ commonName = supplied
9797
9898
[ myca_extensions ]
9999
basicConstraints = critical,CA:TRUE
100+
subjectAltName = IP:127.0.0.1
100101
EOF
101102

102103
foreach my $name ('root') {

0 commit comments

Comments
 (0)