mirror of
https://github.com/curl/curl.git
synced 2026-04-15 08:21:42 +03:00
The source code and documentation says that CRL is not supported by curl's Schannel TLS backend. It's also frequently flaky in CI with both MinGW and MSVC jobs, e.g.: https://github.com/curl/curl/actions/runs/14134841988/job/39603994164 (Schannel) https://github.com/curl/curl/actions/runs/14134841988/job/39606336445 (Schannel) https://github.com/curl/curl/actions/runs/13981383629/job/39147183706 (LibreSSL) ``` curl returned 35, when expecting 60 ``` This test was passing with Schannel because it misses the `--insecure` option and thus always returns 60, regardless of passing `--crlfile` or not: ``` curl: (60) schannel: CertGetCertificateChain trust error CERT_TRUST_REVOCATION_STATUS_UNKNOWN More details here: https://curl.se/docs/sslcerts.html curl failed to verify the legitimacy of the server and therefore could not establish a secure connection to it. To learn more about this situation and how to fix it, please visit the webpage mentioned above. ``` Closes #16862
88 lines
2.3 KiB
Text
88 lines
2.3 KiB
Text
#***************************************************************************
|
|
# _ _ ____ _
|
|
# Project ___| | | | _ \| |
|
|
# / __| | | | |_) | |
|
|
# | (__| |_| | _ <| |___
|
|
# \___|\___/|_| \_\_____|
|
|
#
|
|
# Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
|
|
#
|
|
# This software is licensed as described in the file COPYING, which
|
|
# you should have received as part of this distribution. The terms
|
|
# are also available at https://curl.se/docs/copyright.html.
|
|
#
|
|
# You may opt to use, copy, modify, merge, publish, distribute and/or sell
|
|
# copies of the Software, and permit persons to whom the Software is
|
|
# furnished to do so, under the terms of the COPYING file.
|
|
#
|
|
# This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
|
|
# KIND, either express or implied.
|
|
#
|
|
# SPDX-License-Identifier: curl
|
|
#
|
|
###########################################################################
|
|
#
|
|
# This file can be used to specify test cases that should not run when all
|
|
# test cases are run by runtests.pl. Just add the plain test case numbers, one
|
|
# per line.
|
|
# Lines starting with '#' letters are treated as comments.
|
|
#
|
|
# Uses SRP to "a server not supporting it" but modern stunnel versions
|
|
# will silently accept it and remain happy
|
|
323
|
|
#
|
|
594
|
|
836
|
|
882
|
|
938
|
|
# test 1182 kills the test servers as a side effect
|
|
# of running runtests.pl as a child of itself sharing
|
|
# some of the directories.
|
|
1182
|
|
# test 1184 causes flakiness in CI builds
|
|
1184
|
|
1209
|
|
1211
|
|
# fnmatch differences are just too common to make testing them sensible
|
|
1307
|
|
1316
|
|
# test 1510 causes problems on the CI on GitHub
|
|
# example: https://travis-ci.org/curl/curl/builds/81633600
|
|
1510
|
|
1512
|
|
# test 1801 causes problems in CI builds
|
|
# https://github.com/curl/curl/issues/380
|
|
1801
|
|
#
|
|
2043
|
|
# The CRL test doesn't work with wolfSSL
|
|
%if wolfssl
|
|
313
|
|
%endif
|
|
# The CRL test doesn't work with BearSSL
|
|
%if bearssl
|
|
313
|
|
%endif
|
|
# Schannel does not support CRL file
|
|
%if Schannel
|
|
313
|
|
%endif
|
|
# Secure Transport does not support CRL file
|
|
%if sectransp
|
|
313
|
|
%endif
|
|
%if WinIDN
|
|
165
|
|
%endif
|
|
# Windows non-Unicode builds fail to receive Unicode text via the command-line
|
|
%if win32
|
|
%if !Unicode
|
|
%if libidn2
|
|
165
|
|
1560
|
|
%endif
|
|
1448
|
|
2046
|
|
2047
|
|
%endif
|
|
%endif
|