]> xenbits.xensource.com Git - libvirt.git/commitdiff
tests: force use of "NORMAL" TLS priority in test suite
authorDaniel P. Berrangé <berrange@redhat.com>
Mon, 5 Mar 2018 12:46:16 +0000 (12:46 +0000)
committerDaniel P. Berrangé <berrange@redhat.com>
Tue, 6 Mar 2018 10:09:44 +0000 (10:09 +0000)
When generating certificates we rely on GNUTLS' built-in default setup
for the ciphers used in the certs. We then currently run with the distro
specific TLS priority setup which can be much stronger, to the extent
that the certificates we generate are considered untrustworthy. We don't
care about the quality of the ciphers we use in the test suite, so just
force the priority to "NORMAL" which should ensure our certs are
accepted by GNUTLS.

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
tests/virnettlscontexttest.c
tests/virnettlssessiontest.c

index 089c10e9640afed96493ca0d6776833b3410d9ea..86647f3014b02e2e67dd36ab13bc4c531393daf9 100644 (file)
@@ -72,7 +72,7 @@ static int testTLSContextInit(const void *opaque)
                                          data->crt,
                                          KEYFILE,
                                          NULL,
-                                         NULL,
+                                         "NORMAL",
                                          true,
                                          true);
     } else {
@@ -80,7 +80,7 @@ static int testTLSContextInit(const void *opaque)
                                          NULL,
                                          data->crt,
                                          KEYFILE,
-                                         NULL,
+                                         "NORMAL",
                                          true,
                                          true);
     }
index 6d639e5b165fc37cfc108cdbe7737b006db77855..7e856071817d8e9af93e7f71f826ee52cf7f16dd 100644 (file)
@@ -113,7 +113,7 @@ static int testTLSSessionInit(const void *opaque)
                                            data->servercrt,
                                            KEYFILE,
                                            data->wildcards,
-                                           NULL,
+                                           "NORMAL",
                                            false,
                                            true);
 
@@ -121,7 +121,7 @@ static int testTLSSessionInit(const void *opaque)
                                            NULL,
                                            data->clientcrt,
                                            KEYFILE,
-                                           NULL,
+                                           "NORMAL",
                                            false,
                                            true);