Set fixed dates for test certificates validity
commit40fad96530caf190a3babf322ca705e744c393bb
authorDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 20 Jul 2023 14:04:27 +0000 (20 16:04 +0200)
committerDaniel Gustafsson <dgustafsson@postgresql.org>
Thu, 20 Jul 2023 14:04:27 +0000 (20 16:04 +0200)
tree3cd35231b78358a33e7d5161a93d8b965542455a
parenta3f695e645d0363d845a828db45deac5af1b4c0e
Set fixed dates for test certificates validity

Rather than specifying a validity of 10 000 days into the future
during test certificate generation, this hardcodes the notBefore
and notAfter attributes to known values. This will allow writing
tests on the validity of the certificates without knowing when a
specific certificate was regenerated.

This is done as a prerequisite for an upcoming patch which adds
notBefore and notAfter to pg_stat_ssl and sslinfo.

Discussion: https://postgr.es/m/EE288A58-947E-479A-9D99-C46C273D7A23@yesql.se
35 files changed:
src/test/ssl/conf/cas.config
src/test/ssl/ssl/both-cas-1.crt
src/test/ssl/ssl/both-cas-2.crt
src/test/ssl/ssl/client+client_ca.crt
src/test/ssl/ssl/client-crldir/9bb9e3c3.r0
src/test/ssl/ssl/client-dn.crt
src/test/ssl/ssl/client-long.crt
src/test/ssl/ssl/client-revoked-utf8.crt
src/test/ssl/ssl/client-revoked.crt
src/test/ssl/ssl/client.crl
src/test/ssl/ssl/client.crt
src/test/ssl/ssl/client_ca.crt
src/test/ssl/ssl/client_ext.crt
src/test/ssl/ssl/root+client-crldir/9bb9e3c3.r0
src/test/ssl/ssl/root+client.crl
src/test/ssl/ssl/root+client_ca.crt
src/test/ssl/ssl/root+server-crldir/a836cc2d.r0
src/test/ssl/ssl/root+server.crl
src/test/ssl/ssl/root+server_ca.crt
src/test/ssl/ssl/server-cn-and-alt-names.crt
src/test/ssl/ssl/server-cn-and-ip-alt-names.crt
src/test/ssl/ssl/server-cn-only+server_ca.crt
src/test/ssl/ssl/server-cn-only.crt
src/test/ssl/ssl/server-crldir/a836cc2d.r0
src/test/ssl/ssl/server-ip-alt-names.crt
src/test/ssl/ssl/server-ip-cn-and-alt-names.crt
src/test/ssl/ssl/server-ip-cn-and-dns-alt-names.crt
src/test/ssl/ssl/server-ip-cn-only.crt
src/test/ssl/ssl/server-ip-in-dnsname.crt
src/test/ssl/ssl/server-multiple-alt-names.crt
src/test/ssl/ssl/server-no-names.crt
src/test/ssl/ssl/server-revoked.crt
src/test/ssl/ssl/server-single-alt-name.crt
src/test/ssl/ssl/server.crl
src/test/ssl/ssl/server_ca.crt