maple/prplos
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: cram: provide TLS certificate to servefile

Browse Source 
Debian 13 ships pyOpenSSL without the deprecated X509Req API used by
servefile certificate generation.

Generate a short-lived certificate with openssl and pass it to both
HTTPS server instances.

Assisted-by: codex:gpt-5
Signed-off-by: Petr Štetiar <petr.stetiar@prplfoundation.org>
References: PPW-1258
This commit is contained in:
Petr Štetiar 2026-07-20 01:52:54 +02:00 committed by FAOUZI YAHYA
parent 74447b9463
commit 4e07a8fbea
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
.gitlab/tests/cram/generic/acceleration-plan-components/130-periodicfileupload.t
View File

@ -141,7 +141,8 @@ Prepare CABundle for the cram tests:
$ R 'ba-cli "Device.PeriodicFileTransfer.Transfer.cram-Transfer-1.Enable=1"' > /dev/null
$ sleep 1
$ kill -9 "$servefile_pid"
$ servefile -u /tmp/130-periodicfileuploads/ -p 8181 --ssl >/dev/null 2>&1 &
$ openssl req -x509 -newkey rsa:2048 -nodes -keyout /tmp/servefile.key -out /tmp/servefile.crt -subj "/CN=$SERVER_IP" -addext "subjectAltName=IP:$SERVER_IP" -days 1 >/dev/null 2>&1
$ servefile -u /tmp/130-periodicfileuploads/ -p 8181 --ssl --key /tmp/servefile.key --cert /tmp/servefile.crt >/dev/null 2>&1 &
$ servefile_pid="$!"
$ sleep 4
$ R "openssl s_client -connect \"$SERVER_IP:8181\" -showcerts < /dev/null 2> /dev/null | openssl x509 -outform PEM > /tmp/server-cert.crt"
@ -192,7 +193,7 @@ Check PeriodicFileTransfer error code reporting for various failure scenarios:
]
$ kill -9 "$servefile_pid"
$ servefile -u /tmp/130-periodicfileuploads/ -p 8181 --ssl >/dev/null 2>&1 &
$ servefile -u /tmp/130-periodicfileuploads/ -p 8181 --ssl --key /tmp/servefile.key --cert /tmp/servefile.crt >/dev/null 2>&1 &
$ servefile_pid="$!"
$ R 'ba-cli "Device.PeriodicFileTransfer.Profile.cram-Profile-1.Protocol=HTTPS"' > /dev/null
$ R "ba-cli 'Device.PeriodicFileTransfer.Profile.cram-Profile-1.HTTP.URL=\"https://$SERVER_IP:8181\"'" > /dev/null
@ -216,3 +217,4 @@ Cleanup test instances:
$ R 'ba-cli "Device.PeriodicFileTransfer.Transfer.cram-Transfer-1.-"' > /dev/null
$ R 'ba-cli "Device.PeriodicFileTransfer.Profile.cram-Profile-1.-"' > /dev/null
$ kill -9 "$servefile_pid"
$ rm -f /tmp/servefile.key /tmp/servefile.crt