Alberto Bertogli fcf2cae120 test: Make generate_cert use IDNA for certificate fields ...

In Go 1.10 the TLS library will start to reject DNS SANs which are not
properly formed; and in particular, if they're not IDNA-encoded. See:
 - https://github.com/golang/go/issues/15196
 - 9e76ce7070

The generate_cert utility will write non-IDNA DNS SANs, which the TLS
library does not like, causing our idna tests to fail.

This patch fixes this incompatibility by making generate_cert IDNA-encode
the host names when adding them to the certificate.

2017-12-08 14:07:42 +00:00

4.5 KiB

Raw Blame History

View Raw