chore: have CI self-update that test cert...

steffengy · Mar 31, 2023 · ea4ffcf · ea4ffcf
1 parent 788c615
commit ea4ffcf
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 4 deletions.
diff --git a/appveyor.yml b/appveyor.yml
@@ -23,4 +23,5 @@ build: off
 test_script:
   # TODO remove this loop when server 2016 lands on appveyor; related to https://github.com/steffengy/schannel-rs/issues/8
   - set RUST_BACKTRACE=1
+  - .\update_test_cert.bat
   - ps: for($i=1; $i -le 3; $i++) { cmd /c "cargo test 2>&1"; if ($?) { break } }
diff --git a/src/test.rs b/src/test.rs
@@ -304,10 +304,7 @@ fn verify_callback_gives_failed_cert() {
     let err = tls_stream::Builder::new()
         .domain("self-signed.badssl.com")
         .verify_callback(|validation_result| {
-            let expected_finger = vec![
-                0x31, 0xCF, 0x9F, 0x34, 0x65, 0x7B, 0xF1, 0xA7, 0xA2, 0xAA,
-                0xB0, 0x4F, 0x46, 0x48, 0x19, 0x42, 0x83, 0x6D, 0x84, 0xE2,
-            ];
+            let expected_finger = include_bytes!("../test/self-signed.badssl.com.cer.sha1").to_vec();
             assert_eq!(
                 validation_result
                     .failed_certificate()

diff --git a/update_test_cert.bat b/update_test_cert.bat
@@ -0,0 +1,2 @@
+openssl s_client -showcerts -connect self-signed.badssl.com:443 -servername self-signed.badssl.com <NUL|openssl x509 -outform der -out .\test\self-signed.badssl.com.cer
+openssl x509 -noout -fingerprint -sha1 -inform der -in .\test\self-signed.badssl.com.cer 2>&1|powershell.exe -command "Set-Content .\test\self-signed.badssl.com.cer.sha1 -Encoding Byte -Value ([byte[]] -split ($Input.split('=', 2)[1].replace(':', '') -replace '..', '0x$& '))"
Original file line number	Diff line number	Diff line change
		@@ -0,0 +1,2 @@
		openssl s_client -showcerts -connect self-signed.badssl.com:443 -servername self-signed.badssl.com <NUL\|openssl x509 -outform der -out .\test\self-signed.badssl.com.cer
		openssl x509 -noout -fingerprint -sha1 -inform der -in .\test\self-signed.badssl.com.cer 2>&1\|powershell.exe -command "Set-Content .\test\self-signed.badssl.com.cer.sha1 -Encoding Byte -Value ([byte[]] -split ($Input.split('=', 2)[1].replace(':', '') -replace '..', '0x$& '))"