database/tidb
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

br/lightning: add basicConstraints to test ca (#50129)

Browse Source 
close pingcap/tidb#50150
This commit is contained in:
D3Hunter
2024-01-08 11:00:22 +08:00
committed by GitHub
parent 9b0fd9ea29
commit e66ea24daf
2 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
br/tests/_utils/generate_certs
View File

@ -21,7 +21,7 @@ mkdir -p $TEST_DIR/certs
openssl ecparam -out "$TEST_DIR/certs/ca.key" -name prime256v1 -genkey
# CA's Common Name must not be the same as signed certificate.
openssl req -new -batch -sha256 -subj '/CN=br_tests' -key "$TEST_DIR/certs/ca.key" -out "$TEST_DIR/certs/ca.csr"
openssl x509 -req -sha256 -days 2 -in "$TEST_DIR/certs/ca.csr" -signkey "$TEST_DIR/certs/ca.key" -out "$TEST_DIR/certs/ca.pem"
openssl x509 -req -sha256 -days 2 -in "$TEST_DIR/certs/ca.csr" -extfile "${cur_dir}/../config/rootca.conf" -extensions ext -signkey "$TEST_DIR/certs/ca.key" -out "$TEST_DIR/certs/ca.pem"
for cluster in tidb pd tikv lightning tiflash curl ticdc br; do
openssl ecparam -out "$TEST_DIR/certs/$cluster.key" -name prime256v1 -genkey
openssl req -new -batch -sha256 -subj '/CN=localhost' -key "$TEST_DIR/certs/$cluster.key" -out "$TEST_DIR/certs/$cluster.csr"

2
br/tests/config/rootca.conf Normal file
View File

@ -0,0 +1,2 @@
[ext]
basicConstraints=CA:TRUE,pathlen:0