[GH-ISSUE #2474] `just generate-test-certs` fails to verify just-generated certificates #998

New issue

Closed

opened 2026-03-16 01:13:31 +03:00 by kerem · 1 comment

kerem commented

2026-03-16 01:13:31 +03:00

Owner

Originally created by @djc on GitHub (Sep 25, 2024).
Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/2474

In https://github.com/hickory-dns/hickory-dns/actions/runs/11029731470/job/30632799624?pr=2473, it looks like the certificates in /tests/test-data have expired. I tried running just generate-test-certs (per github.com/hickory-dns/hickory-dns@be4d16893f which was the last update), but it fails with:

...
----> Verifying Cert <----
++ openssl verify -CAfile ca.pem cert.pem
C=US, ST=California, L=San Francisco, O=Hickory DNS, CN=root.example.com
error 79 at 1 depth lookup: invalid CA certificate
error cert.pem: verification failed
error: Recipe `generate-test-certs` failed on line 137 with exit code 2

This seems spurious because the tests relying on these certificates still seem to work.

Originally created by @djc on GitHub (Sep 25, 2024). Original GitHub issue: https://github.com/hickory-dns/hickory-dns/issues/2474 In https://github.com/hickory-dns/hickory-dns/actions/runs/11029731470/job/30632799624?pr=2473, it looks like the certificates in `/tests/test-data` have expired. I tried running `just generate-test-certs` (per https://github.com/hickory-dns/hickory-dns/commit/be4d16893ffd602d1cc1eab532d3b52f69a526b1 which was the last update), but it fails with: ``` ... ----> Verifying Cert <---- ++ openssl verify -CAfile ca.pem cert.pem C=US, ST=California, L=San Francisco, O=Hickory DNS, CN=root.example.com error 79 at 1 depth lookup: invalid CA certificate error cert.pem: verification failed error: Recipe `generate-test-certs` failed on line 137 with exit code 2 ``` This seems spurious because the tests relying on these certificates still seem to work.