From 056fbc8058f1ec30ca64ae5456f969ba6060d28c Mon Sep 17 00:00:00 2001 From: Roberto Campesato Date: Mar 27 2024 11:26:53 +0000 Subject: Fix patch relaxing CA certs bundle validation adding unit test change --- diff --git a/0001-relax-CA-certs-checks.patch b/0001-relax-CA-certs-checks.patch index f74e26a..70b4ced 100644 --- a/0001-relax-CA-certs-checks.patch +++ b/0001-relax-CA-certs-checks.patch @@ -2,7 +2,7 @@ From: Roberto Campesato diff --git a/crypto/tlscredsx509.c b/crypto/tlscredsx509.c --- a/crypto/tlscredsx509.c +++ b/crypto/tlscredsx509.c -@@ -502,14 +502,6 @@ +@@ -502,14 +502,6 @@ qcrypto_tls_creds_x509_sanity_check(QCryptoTLSCredsX509 *creds, goto cleanup; } @@ -17,3 +17,15 @@ diff --git a/crypto/tlscredsx509.c b/crypto/tlscredsx509.c if (cert && ncacerts && qcrypto_tls_creds_check_cert_pair(cert, certFile, cacerts, ncacerts, cacertFile, +diff --git a/tests/unit/test-crypto-tlscredsx509.c b/tests/unit/test-crypto-tlscredsx509.c +--- a/tests/unit/test-crypto-tlscredsx509.c ++++ b/tests/unit/test-crypto-tlscredsx509.c +@@ -285,7 +285,7 @@ int main(int argc, char **argv) + TLS_TEST_REG(badca1, true, cacert4req.filename, servercert4req.filename, + true); + TLS_TEST_REG(badca2, true, +- cacert5req.filename, servercert5req.filename, true); ++ cacert5req.filename, servercert5req.filename, false); + TLS_TEST_REG(badca3, true, + cacert6req.filename, servercert6req.filename, true); + diff --git a/qemu.spec b/qemu.spec index 94cd22b..405ff8e 100644 --- a/qemu.spec +++ b/qemu.spec @@ -3174,6 +3174,9 @@ useradd -r -u 107 -g qemu -G kvm -d / -s /sbin/nologin \ %changelog +* Tue Mar 26 2024 Roberto Campesato - 8.2.2-1.1 +- include unit test change in patch relaxing CA cert bundle validation + * Tue Mar 19 2024 Roberto Campesato - 8.2.2-1.1 - Merge latest changes from Fedora - Re-enabled libblkio (RHBZ#2232766 closed)