You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: t/129-ssl-socket.t
+14-6Lines changed: 14 additions & 6 deletions
Original file line number
Diff line number
Diff line change
@@ -732,7 +732,7 @@ $::DSTRootCertificate"
732
732
733
733
--- stream_response eval
734
734
qr{connected:1
735
-
failed todo SSL handshake: (22: certificate chain too long|20: unable toget local issuer certificate)
735
+
failed todo SSL handshake: (22: certificate chain too long|20: unable toget local issuer certificate|21: unable to verify the first certificate)
736
736
failed to send stream request: closed
737
737
}
738
738
@@ -741,7 +741,7 @@ failed to send stream request: closed
741
741
--- grep_error_log_out
742
742
--- error_log eval
743
743
['lua ssl server name: "openresty.org"',
744
-
qr/lua ssl certificate verify error: \((22: certificate chain too long|20: unable toget local issuer certificate)\)/]
744
+
qr/lua ssl certificate verify error: \((22: certificate chain too long|20: unable toget local issuer certificate|21: unable to verify the first certificate)\)/]
745
745
--- no_error_log
746
746
SSL reused session
747
747
[alert]
@@ -808,7 +808,7 @@ $::DSTRootCertificate"
808
808
809
809
--- stream_response eval
810
810
qr/connected:1
811
-
failed todo SSL handshake: (22: certificate chain too long|20: unable toget local issuer certificate)
811
+
failed todo SSL handshake: (22: certificate chain too long|20: unable toget local issuer certificate|21: unable to verify the first certificate)
812
812
failed to send stream request: closed
813
813
/
814
814
@@ -1928,10 +1928,18 @@ SSL reused session
1928
1928
collectgarbage()
1929
1929
}
1930
1930
1931
-
--- stream_response
1932
-
connected: 1
1931
+
--- stream_response eval
1932
+
# Since nginx version 1.19.1, invalidity date is considerd a non-critical CRL
1933
+
# entry extension, in other words, revoke still works even if CRL has expired.
0 commit comments