dexter has submitted this change. ( https://gerrit.osmocom.org/c/osmo-ttcn3-hacks/+/41249?usp=email )
Change subject: smdpp_tests: extend comment with hint on CA cert locations ......................................................................
smdpp_tests: extend comment with hint on CA cert locations
Let's extend the comment around mp_es2plus_server_host and mention that CA certfiicates should be made availablein /etc/ssl/certs. In case the CA certificate is not present in /etc/ssl/certs, libcurl will refuse to connect.
Change-Id: I58d4f35c8493a9f9531da8d7c565760a08101e35 Related: SYS#7339 --- M smdpp/smdpp_Tests.ttcn 1 file changed, 4 insertions(+), 1 deletion(-)
Approvals: Jenkins Builder: Verified osmith: Looks good to me, approved
diff --git a/smdpp/smdpp_Tests.ttcn b/smdpp/smdpp_Tests.ttcn index 7a300a2..119ad08 100644 --- a/smdpp/smdpp_Tests.ttcn +++ b/smdpp/smdpp_Tests.ttcn @@ -383,7 +383,10 @@ var smdpp_ConnHdlrPars pars := { /* Unfortunately the SMDP server FQDN cannot be made configurable via a module parameter since it always * to match the FQDN in the test SSL certificates. To resolve the server FQDN to an IP address, an entry - * in /etc/hosts is sufficient. */ + * in /etc/hosts is sufficient. It should also be pointed out that this testsuite (libcurl) will also + * verify the presented server certificate against the related CA. To ensure that the server certificate + * verification is possible, ensure that the related CA certificates are made available in + * /etc/ssl/certs */ smdp_server_fqdn := "testsmdpplus1.example.com", smdp_es2p_server_port := mp_es2plus_server_port, cert_path := "./sgp26/CertificateIssuer",