diff options
author | tb <> | 2020-10-02 19:38:39 +0000 |
---|---|---|
committer | tb <> | 2020-10-02 19:38:39 +0000 |
commit | d84860fbd6305d0c2e8ca7708157c803c4c2c50a (patch) | |
tree | b8767076b26736ea635f1082e86458756d9ddcea /src/regress/lib/libcrypto/x509/bettertls/README | |
parent | 3d91b288cd86686f4b7c3038882c3284be0de26b (diff) | |
download | openbsd-d84860fbd6305d0c2e8ca7708157c803c4c2c50a.tar.gz openbsd-d84860fbd6305d0c2e8ca7708157c803c4c2c50a.tar.bz2 openbsd-d84860fbd6305d0c2e8ca7708157c803c4c2c50a.zip |
spelling, punctuation, whitespace
Diffstat (limited to '')
-rw-r--r-- | src/regress/lib/libcrypto/x509/bettertls/README | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/src/regress/lib/libcrypto/x509/bettertls/README b/src/regress/lib/libcrypto/x509/bettertls/README index 722f5c18ef..b55e90cfab 100644 --- a/src/regress/lib/libcrypto/x509/bettertls/README +++ b/src/regress/lib/libcrypto/x509/bettertls/README | |||
@@ -4,7 +4,7 @@ Netflix "bettertls" suite from https://github.com/Netflix/bettertls | |||
4 | cloned at commit 8950fdf2a46eaa357aa8d338c871f2cbc00e86e5 in July 2020. | 4 | cloned at commit 8950fdf2a46eaa357aa8d338c871f2cbc00e86e5 in July 2020. |
5 | 5 | ||
6 | The certificates are in "certificates", generated by running the | 6 | The certificates are in "certificates", generated by running the |
7 | generator with gradle as per the directions. they are named | 7 | generator with gradle as per the directions. They are named |
8 | corresponding to the number of the test, currently from 1 to 3645. | 8 | corresponding to the number of the test, currently from 1 to 3645. |
9 | 9 | ||
10 | In the directory "scripts" are the "expects.json" which contains the | 10 | In the directory "scripts" are the "expects.json" which contains the |
@@ -17,13 +17,13 @@ converted to the simple output format used by us here using the | |||
17 | "validate.c" runs X509_verify against each certificate, trying with | 17 | "validate.c" runs X509_verify against each certificate, trying with |
18 | both a required name of "localhost.local" for the "DNS" test and | 18 | both a required name of "localhost.local" for the "DNS" test and |
19 | the ip of 127.0.0.1 for the "IP" test, so each cert is tested | 19 | the ip of 127.0.0.1 for the "IP" test, so each cert is tested |
20 | twice (once expecting the DNS name to validate, and once for the IP) | 20 | twice (once expecting the DNS name to validate, and once for the IP). |
21 | 21 | ||
22 | the output from validate.c is checked by check.perl against "known" | 22 | The output from validate.c is checked by check.perl against "known" |
23 | and "expected" | 23 | and "expected" |
24 | 24 | ||
25 | -An expected value of OK means the cert is valid. | 25 | -An expected value of OK means the cert is valid. |
26 | -An expected value of ERROR means the cert is invalid | 26 | -An expected value of ERROR means the cert is invalid. |
27 | -An expected value of WEAK-OK means the cert could be considered valid | 27 | -An expected value of WEAK-OK means the cert could be considered valid |
28 | by may be rejected. | 28 | by may be rejected. |
29 | 29 | ||