Re: [users@httpd] Re: Issues with test framework against OpenSSL 3.2

2024-01-26 Thread Eric Covener
> > The key here is the "unknown ca", failing the handshake, either because > > the trust chain is broken somehow or the certs need to be generated now > > in a different way with OpenSSL 3.2. I looked at ./t/conf/ssl/ca/asf/certs/ca.crt on the last system I ran the framework on, and it seems to b

[users@httpd] Re: Issues with test framework against OpenSSL 3.2

2024-01-26 Thread David Anes
Hi all, I finally found a solution that passes all tests, but this should really be revised by someone else. Apache::Test module expects x509v1 certificates to be created by default. As of OpenSSL 3.2, the parameter/app "-x509" generates v3 certificates and this makes the testsuite to fail. Th

Re: [users@httpd] If statement against AUTHENTICATE_memberOf variable created by authnz_ldap

2024-01-26 Thread Eric Covener
> So the first question is: Is it normal that I have to use mod_rewrite to > check for group membership ? I tried hundred of syntaxes with SetEnvIf > or SetEnvIfExpr but I never managed to get it working. I'm not sure why > but I guess it's somehow related to "race condition" (lazy evaluation) > wh

[users@httpd] Re: Issues with test framework against OpenSSL 3.2

2024-01-26 Thread David Anes
Hello everyone, After fighting the tests, I can confirm that the issue is certificates are not being verified correctly. For example, for t/protocol/echo.t, I was able to make it pass by updating vhost_socket in TestRequest.pm by bypassing cert verification: Index: httpd-2.4.58/httpd-fram