From f38c1eb74c201b2e9b35adbf162d25636e79b8f6 Mon Sep 17 00:00:00 2001 From: Roland Shoemaker Date: Thu, 17 Nov 2022 08:51:03 -0800 Subject: [release-branch.go1.19] crypto/x509: reduce boring test key size Generating 8192 bit keys times out on builders relatively frequently. We just need something that isn't a boringAllowCert allowed key size so we can test that a non-boringAllowCert signed intermediate works, so just use 512 instead since it'll be significantly faster. Fixes #57635 Updates #56798 Change-Id: I416e0d8c3aa11ff44e9870755efa95c74d1013f1 Reviewed-on: https://go-review.googlesource.com/c/go/+/451656 Auto-Submit: Roland Shoemaker Reviewed-by: Filippo Valsorda Run-TryBot: Roland Shoemaker TryBot-Result: Gopher Robot Reviewed-by: Bryan Mills (cherry picked from commit 38b9ff60071fc40d197e7002db1320539e74a678) Reviewed-on: https://go-review.googlesource.com/c/go/+/461615 Run-TryBot: Bryan Mills Reviewed-by: Roland Shoemaker --- src/crypto/x509/boring_test.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/crypto/x509/boring_test.go b/src/crypto/x509/boring_test.go index 90fe2a7227..33fd0ed52b 100644 --- a/src/crypto/x509/boring_test.go +++ b/src/crypto/x509/boring_test.go @@ -54,7 +54,7 @@ type boringCertificate struct { func TestBoringAllowCert(t *testing.T) { R1 := testBoringCert(t, "R1", boringRSAKey(t, 2048), nil, boringCertCA|boringCertFIPSOK) - R2 := testBoringCert(t, "R2", boringRSAKey(t, 8192), nil, boringCertCA) + R2 := testBoringCert(t, "R2", boringRSAKey(t, 512), nil, boringCertCA) R3 := testBoringCert(t, "R3", boringRSAKey(t, 4096), nil, boringCertCA|boringCertFIPSOK) M1_R1 := testBoringCert(t, "M1_R1", boringECDSAKey(t, elliptic.P256()), R1, boringCertCA|boringCertFIPSOK) -- cgit v1.2.1