Skip to content

Fix JRuby test suite: OpenSSL 3 expired certs, TLS 1.3 mTLS, DER key parsing#119

Merged
kares merged 1 commit intocheald:masterfrom
jsvd:fix_tests
Oct 20, 2025
Merged

Fix JRuby test suite: OpenSSL 3 expired certs, TLS 1.3 mTLS, DER key parsing#119
kares merged 1 commit intocheald:masterfrom
jsvd:fix_tests

Conversation

@jsvd
Copy link
Copy Markdown
Contributor

@jsvd jsvd commented Sep 2, 2025

  • OpenSSL 3 compatibility: stop relying on negative/zero -days for expired cert fixtures (rejected by OpenSSL 3, preventing local running of tests on MacOS). Synthesize an expired self‑signed cert at runtime in the test helper
  • TLS 1.3 interop: work around mTLS handshake timeouts with JRuby on JDK 21 by disabling TLSv1.3 on the WEBrick SSL test server
  • PKCS#8 key parsing: do not chomp decoded DER. Trimming binary DER can remove trailing newline bytes and corrupt the key, causing InvalidKeySpecException (covered by an existing test)

…parsing

* OpenSSL 3 compatibility: stop relying on negative/zero -days for expired cert fixtures (rejected by OpenSSL 3, preventing local running of tests on MacOS). Synthesize an expired self‑signed cert at runtime in the test helper
* TLS 1.3 interop: work around mTLS handshake timeouts with JRuby on JDK 21 by disabling TLSv1.3 on the WEBrick SSL test server
* PKCS#8 key parsing: do not chomp decoded DER. Trimming binary DER can remove trailing newline bytes and corrupt the key, causing InvalidKeySpecException (covered by an existing test)
@jsvd jsvd mentioned this pull request Sep 2, 2025
@jsvd
Copy link
Copy Markdown
Contributor Author

jsvd commented Oct 16, 2025

hi @cheald, @kares, just pinging here to see if this is the direction you'd like to go with CI. This PR puts manticore back to green on github actions and makes testing locally work on macos.

@kares kares merged commit 508d62e into cheald:master Oct 20, 2025
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants