testssl.sh

mirror of https://github.com/drwetter/testssl.sh.git synced 2026-10-25 10:35:12 +01:00

Files

T

Dirk Wetter 06f364f25b Make ca_hashes up-to-date test platform-independent

The test compared the regenerated etc/ca_hashes.txt byte-for-byte
against the committed file, but two aspects are not stable across
platforms:

- The name column comes from 'openssl x509 -subject', which formats
  differently between LibreSSL (macOS) and OpenSSL (Linux).
- The line order comes from 'sort', whose collation differs between
  BSD libc and glibc even under an identically-named locale.

Only the SPKI hash (field 1) is deterministic, and it is the sole
column testssl.sh consumes. So:

- The test now compares the set of SPKI hashes (field 1) between the
  committed and regenerated files, order-independently, using
  'LC_ALL=C sort -u' for a stable, platform-independent collation.
- create_ca_hashes.sh pins the name format ('-nameopt compat') and
  sort collation ('LC_ALL=C') so the generated file is stable.

Verified on macOS (LibreSSL) and Ubuntu 24.04 (OpenSSL).

2026-10-17 17:06:55 +02:00

00_unittest_baseline.sh

Fix shellcheck warnings

2021-09-03 22:19:39 +00:00

ccs-injection.bash

Use grep -E instead of egrep

2022-09-12 20:12:28 +00:00

checkcert.sh

Merge pull request #2237 from a1346054/which

2022-09-14 21:25:14 +02:00

create_ca_hashes.sh

Make ca_hashes up-to-date test platform-independent