diff options
author | Jack Lloyd <[email protected]> | 2016-12-27 16:40:02 -0500 |
---|---|---|
committer | Jack Lloyd <[email protected]> | 2016-12-27 16:40:02 -0500 |
commit | 0e3d9acafc4cc06f6ab8d62b2510a57e8df852d6 (patch) | |
tree | 2e2a60551d27f19b352a590330644944b44f7a17 /src/tests/test_name_constraint.cpp | |
parent | 0f0b147f57fda3459143e71b4c1ff4444d27fdd3 (diff) |
Increase Path_Validation_Restrictions default min strength to 110
Effectively disables 1024 bit RSA as well as SHA-1.
Edit the tests where required to enable it again.
Diffstat (limited to 'src/tests/test_name_constraint.cpp')
-rw-r--r-- | src/tests/test_name_constraint.cpp | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/tests/test_name_constraint.cpp b/src/tests/test_name_constraint.cpp index 01bdfc3ef..95cb9f229 100644 --- a/src/tests/test_name_constraint.cpp +++ b/src/tests/test_name_constraint.cpp @@ -63,7 +63,7 @@ class Name_Constraint_Tests : public Test "Certificate does not pass name constraint"), }; std::vector<Test::Result> results; - const Botan::Path_Validation_Restrictions default_restrictions; + const Botan::Path_Validation_Restrictions restrictions(false, 80); for(const auto& t: test_cases) { @@ -74,7 +74,7 @@ class Name_Constraint_Tests : public Test trusted.add_certificate(root); Botan::Path_Validation_Result path_result = Botan::x509_path_validate( - sub, default_restrictions, trusted, std::get<2>(t), Botan::Usage_Type::TLS_SERVER_AUTH); + sub, restrictions, trusted, std::get<2>(t), Botan::Usage_Type::TLS_SERVER_AUTH); if(path_result.successful_validation() && path_result.trust_root() != root) path_result = Botan::Path_Validation_Result(Botan::Certificate_Status_Code::CANNOT_ESTABLISH_TRUST); |