]> git.kaiwu.me - haproxy.git/commit
REGTESTS: ssl: add ssl_c_policies test
authorJuan Pablo Mora <juan.mora.carbonell@gmail.com>
Thu, 6 Aug 2026 15:07:56 +0000 (17:07 +0200)
committerWilliam Lallemand <wlallemand@haproxy.com>
Mon, 10 Aug 2026 13:34:29 +0000 (15:34 +0200)
commit9bfd816639ad90be6c204f7d21b9fc3af6da24ed
treeac59d973139ebcb0de59d87a3ca9f60b4556d9f0
parente092ed7a6a80cadd6ddf2706724af685d1302cdc
REGTESTS: ssl: add ssl_c_policies test

Add a VTC covering both modes of ssl_c_policies(): the full list of
Certificate Policies OIDs, and the "-m found" single-OID check (both
a present and an absent OID).

reg-tests/ssl/certs/client1.pem (used by the other ssl_c_* sample
tests) is an X509v1 certificate and carries no extensions at all, so
it cannot be reused here. A dedicated, disposable CA and client
certificate (ca_policies.crt / client_policies.pem) were generated
for this test only, with a Certificate Policies extension containing
0.4.0.1862.1.4 and a filler OID. No personal or production data is
involved, only generic placeholder subject fields consistent with
the other certs in this directory.

Verified locally with vtest (VTest2, "last" tag), alongside
ssl_client_samples.vtc and ssl_client_auth.vtc to confirm no
regressions. checkpatch.pl clean (only the generic, inapplicable
"does MAINTAINERS need updating?" notice, since there is no SSL
maintainer entry).
reg-tests/ssl/certs/ca_policies.crt [new file with mode: 0644]
reg-tests/ssl/certs/client_policies.pem [new file with mode: 0644]
reg-tests/ssl/ssl_client_policies.vtc [new file with mode: 0644]
reg-tests/ssl/ssl_client_policies.vtci [new file with mode: 0644]