[PR #2475] [MERGED] Regenerate test certificates #3067

New issue

Closed

opened 2026-03-16 11:23:24 +03:00 by kerem · 0 comments

kerem commented

2026-03-16 11:23:24 +03:00

Owner

📋 Pull Request Information

Original PR: https://github.com/hickory-dns/hickory-dns/pull/2475
Author: @divergentdave
Created: 9/25/2024
Status: ✅ Merged
Merged: 9/25/2024
Merged by: @djc

Base: main ← Head: david/regenerate-certificates

📝 Commits (3)

a61a395 Fix up certificate generation scripts
15045cf Regenerate test certificates
d1f85ff Fix typo

📊 Changes

17 files changed (+291 additions, -285 deletions)

View changed files

📝 justfile (+2 -0)
📝 scripts/gen_certs.sh (+2 -2)
📝 tests/test-data/ca.der (+0 -0)
📝 tests/test-data/ca.key (+50 -50)
📝 tests/test-data/ca.pem (+25 -25)
📝 tests/test-data/ca.pubkey (+12 -12)
📝 tests/test-data/cert-key.pk8 (+50 -50)
📝 tests/test-data/cert.csr (+23 -23)
📝 tests/test-data/cert.key (+50 -50)
📝 tests/test-data/cert.p12 (+0 -0)
📝 tests/test-data/cert.pem (+30 -26)
📝 tests/test-data/test_configs/sec/example.cert (+0 -0)
📝 tests/test-data/test_configs/sec/example.cert.pem (+19 -19)
📝 tests/test-data/test_configs/sec/example.key (+0 -0)
📝 tests/test-data/test_configs/sec/example.key.pem (+26 -26)
📝 tests/test-data/test_configs/sec/example.p12 (+0 -0)
📝 tests/test-data/test_configs/sec/gen-keys.sh (+2 -2)

📄 Description

This cleans up the test certificate generation scripts a bit, and re-generates the certificates. Only the certificate in the test_configs/sec subdirectory is currently expired. I added the corresponding script to the justfile target. I regenerated the other two certificates as well for good measure; they expire in December.

FWIW I didn't run into the problem in #2474. I'm using version 3.0.13 of OpenSSL, from Ubuntu 24.04 packages.

_{🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.}

## 📋 Pull Request Information **Original PR:** https://github.com/hickory-dns/hickory-dns/pull/2475 **Author:** [@divergentdave](https://github.com/divergentdave) **Created:** 9/25/2024 **Status:** ✅ Merged **Merged:** 9/25/2024 **Merged by:** [@djc](https://github.com/djc) **Base:** `main` ← **Head:** `david/regenerate-certificates` --- ### 📝 Commits (3) - [`a61a395`](https://github.com/hickory-dns/hickory-dns/commit/a61a395e950f3a14a6e0f26e3cf55f2cce1192cc) Fix up certificate generation scripts - [`15045cf`](https://github.com/hickory-dns/hickory-dns/commit/15045cf37a50da65a310534f8f98917f35851550) Regenerate test certificates - [`d1f85ff`](https://github.com/hickory-dns/hickory-dns/commit/d1f85ffc9360bbf30ba8e36efa2f9c7cf9f8eb65) Fix typo ### 📊 Changes **17 files changed** (+291 additions, -285 deletions) <details> <summary>View changed files</summary> 📝 `justfile` (+2 -0) 📝 `scripts/gen_certs.sh` (+2 -2) 📝 `tests/test-data/ca.der` (+0 -0) 📝 `tests/test-data/ca.key` (+50 -50) 📝 `tests/test-data/ca.pem` (+25 -25) 📝 `tests/test-data/ca.pubkey` (+12 -12) 📝 `tests/test-data/cert-key.pk8` (+50 -50) 📝 `tests/test-data/cert.csr` (+23 -23) 📝 `tests/test-data/cert.key` (+50 -50) 📝 `tests/test-data/cert.p12` (+0 -0) 📝 `tests/test-data/cert.pem` (+30 -26) 📝 `tests/test-data/test_configs/sec/example.cert` (+0 -0) 📝 `tests/test-data/test_configs/sec/example.cert.pem` (+19 -19) 📝 `tests/test-data/test_configs/sec/example.key` (+0 -0) 📝 `tests/test-data/test_configs/sec/example.key.pem` (+26 -26) 📝 `tests/test-data/test_configs/sec/example.p12` (+0 -0) 📝 `tests/test-data/test_configs/sec/gen-keys.sh` (+2 -2) </details> ### 📄 Description This cleans up the test certificate generation scripts a bit, and re-generates the certificates. Only the certificate in the `test_configs/sec` subdirectory is currently expired. I added the corresponding script to the `justfile` target. I regenerated the other two certificates as well for good measure; they expire in December. FWIW I didn't run into the problem in #2474. I'm using version 3.0.13 of OpenSSL, from Ubuntu 24.04 packages. --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>