romenskiy2012/curl
1
0
Fork 0
mirror of https://github.com/curl/curl.git synced 2026-07-25 23:07:16 +03:00
Code Issues Projects Releases Packages Wiki Activity

tests: test mtls also w/ clientAuth EKU only

Browse source 
The google chrome root program will stop allowing roots that have both
clientAuth and ServerAuth [1].

In one of the mtls tests, use a certificate with only the clientAuth
EKU.

[1] https://googlechrome.github.io/chromerootprogram/#322-pki-hierarchies-included-in-the-chrome-root-store

Closes #17493
This commit is contained in:
Yedaya Katsman 2025-05-30 18:59:14 +03:00 • committed by Daniel Stenberg
parent b53848738c
commit 2cf19c245e
No known key found for this signature in database
GPG key ID: 5CC908FDB71E12C2
3 changed files with 37 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tests/data/test2088
View file

@ -37,7 +37,7 @@ https-mtls
HTTPS GET with client authentication (mtls)
</name>
<command>
--cacert %CERTDIR/certs/test-ca.crt --cert %CERTDIR/certs/test-client-cert.crt --key %CERTDIR/certs/test-client-cert.key https://localhost:%HTTPS-MTLSPORT/%TESTNUMBER
--cacert %CERTDIR/certs/test-ca.crt --cert %CERTDIR/certs/test-client-eku-only.crt --key %CERTDIR/certs/test-client-eku-only.key https://localhost:%HTTPS-MTLSPORT/%TESTNUMBER
</command>
</client>