aboutsummaryrefslogtreecommitdiffstats
path: root/lib/ssl/test/make_certs.erl
diff options
context:
space:
mode:
authorPéter Dimitrov <[email protected]>2019-01-10 16:34:56 +0100
committerPéter Dimitrov <[email protected]>2019-01-10 16:34:56 +0100
commit82602f666daa29717ab936014a9ec1ffa3047813 (patch)
tree3c8a3538d2fc37c60b5248fbd89958b3068c7e38 /lib/ssl/test/make_certs.erl
parent99e235762c021af7107e7c2e9f08c62a21d41f85 (diff)
parent348483658478645e12127e888fd53aed45ad750f (diff)
downloadotp-82602f666daa29717ab936014a9ec1ffa3047813.tar.gz
otp-82602f666daa29717ab936014a9ec1ffa3047813.tar.bz2
otp-82602f666daa29717ab936014a9ec1ffa3047813.zip
Merge branch 'peterdmv/ssl/fix-crl-suite' into maint
* peterdmv/ssl/fix-crl-suite: ssl: Fix CRL suite with openssl-1.1.1a Change-Id: I2847107b6cf0210c3002c016a6ba49288505d06f
Diffstat (limited to 'lib/ssl/test/make_certs.erl')
-rw-r--r--lib/ssl/test/make_certs.erl12
1 files changed, 12 insertions, 0 deletions
diff --git a/lib/ssl/test/make_certs.erl b/lib/ssl/test/make_certs.erl
index 8fe7c54549..7f3371da9a 100644
--- a/lib/ssl/test/make_certs.erl
+++ b/lib/ssl/test/make_certs.erl
@@ -189,6 +189,18 @@ gencrl(Root, CA, C, CrlHours) ->
Env = [{"ROOTDIR", filename:absname(Root)}],
cmd(Cmd, Env).
+%% This function sets the number of seconds until the next CRL is due.
+gencrl_sec(Root, CA, C, CrlSecs) ->
+ CACnfFile = filename:join([Root, CA, "ca.cnf"]),
+ CACRLFile = filename:join([Root, CA, "crl.pem"]),
+ Cmd = [C#config.openssl_cmd, " ca"
+ " -gencrl ",
+ " -crlsec ", integer_to_list(CrlSecs),
+ " -out ", CACRLFile,
+ " -config ", CACnfFile],
+ Env = [{"ROOTDIR", filename:absname(Root)}],
+ cmd(Cmd, Env).
+
can_generate_expired_crls(C) ->
%% OpenSSL can generate CRLs with an expiration date in the past,
%% if we pass a negative number for -crlhours. However, LibreSSL