diff options
author | Roland Shoemaker <roland@golang.org> | 2022-11-17 08:51:03 -0800 |
---|---|---|
committer | Carlos Amedee <carlos@golang.org> | 2023-01-17 16:10:45 +0000 |
commit | f38c1eb74c201b2e9b35adbf162d25636e79b8f6 (patch) | |
tree | 2c1e1be12b0f6081749722684424b429c695e278 | |
parent | 1e9ff255a130200fcc4ec5e911d28181fce947d5 (diff) | |
download | go-git-f38c1eb74c201b2e9b35adbf162d25636e79b8f6.tar.gz |
[release-branch.go1.19] crypto/x509: reduce boring test key size
Generating 8192 bit keys times out on builders relatively frequently. We
just need something that isn't a boringAllowCert allowed key size so we
can test that a non-boringAllowCert signed intermediate works, so just
use 512 instead since it'll be significantly faster.
Fixes #57635
Updates #56798
Change-Id: I416e0d8c3aa11ff44e9870755efa95c74d1013f1
Reviewed-on: https://go-review.googlesource.com/c/go/+/451656
Auto-Submit: Roland Shoemaker <roland@golang.org>
Reviewed-by: Filippo Valsorda <filippo@golang.org>
Run-TryBot: Roland Shoemaker <roland@golang.org>
TryBot-Result: Gopher Robot <gobot@golang.org>
Reviewed-by: Bryan Mills <bcmills@google.com>
(cherry picked from commit 38b9ff60071fc40d197e7002db1320539e74a678)
Reviewed-on: https://go-review.googlesource.com/c/go/+/461615
Run-TryBot: Bryan Mills <bcmills@google.com>
Reviewed-by: Roland Shoemaker <roland@golang.org>
-rw-r--r-- | src/crypto/x509/boring_test.go | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go index 90fe2a7227..33fd0ed52b 100644 --- a/src/crypto/x509/boring_test.go +++ b/src/crypto/x509/boring_test.go @@ -54,7 +54,7 @@ type boringCertificate struct { func TestBoringAllowCert(t *testing.T) { R1 := testBoringCert(t, "R1", boringRSAKey(t, 2048), nil, boringCertCA|boringCertFIPSOK) - R2 := testBoringCert(t, "R2", boringRSAKey(t, 8192), nil, boringCertCA) + R2 := testBoringCert(t, "R2", boringRSAKey(t, 512), nil, boringCertCA) R3 := testBoringCert(t, "R3", boringRSAKey(t, 4096), nil, boringCertCA|boringCertFIPSOK) M1_R1 := testBoringCert(t, "M1_R1", boringECDSAKey(t, elliptic.P256()), R1, boringCertCA|boringCertFIPSOK) |