From 05fd14aea7eff2a6911a6f529f1237276482c6e7 Mon Sep 17 00:00:00 2001

From: Kazuki Yamaguchi <k@rhe.jp>

Date: Fri, 10 Jul 2020 13:56:38 +0900

Subject: [PATCH] test/openssl/test_ssl: relax regex to match OpenSSL's error

 message

OpenSSL 3.0 slightly changed the error message for a certificate

verification failure when an untrusted self-signed certificate is found

in the chain.

---

 test/openssl/test_ssl.rb | 4 +++-

 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb

index 6095d545b5..9e9b8b9b69 100644

--- a/test/openssl/test_ssl.rb

+++ b/test/openssl/test_ssl.rb

@@ -964,7 +964,9 @@ def test_connect_certificate_verify_failed_exception_message

     start_server(ignore_listener_error: true) { |port|

       ctx = OpenSSL::SSL::SSLContext.new

       ctx.set_params

-      assert_raise_with_message(OpenSSL::SSL::SSLError, /self signed/) {

+      # OpenSSL <= 1.1.0: "self signed certificate in certificate chain"

+      # OpenSSL >= 3.0.0: "self-signed certificate in certificate chain"

+      assert_raise_with_message(OpenSSL::SSL::SSLError, /self.signed/) {

         server_connect(port, ctx)

       }

     }

-- 

2.32.0