lp:~adrien/brz/brz

Branch merges

Propose for merging

No branches dependent on this one.

Approved for merging into lp:brz/3.3

Jelmer Vernooij: Approve on 2025-01-08

Diff: 573 lines (+246/-242)

8 files modified

breezy/tests/ssl_certs/ca.crt (+27/-27)
breezy/tests/ssl_certs/ca.key (+54/-54)
breezy/tests/ssl_certs/create_ssls.py (+4/-2)
breezy/tests/ssl_certs/server.crt (+29/-28)
breezy/tests/ssl_certs/server.csr (+22/-22)
breezy/tests/ssl_certs/server_with_pass.key (+54/-54)
breezy/tests/ssl_certs/server_without_pass.key (+52/-51)
breezy/tests/test_symbol_versioning.py (+4/-4)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

7852. By Adrien Nader on 2025-01-08

tests: match python 3.13, drop leading whitespace in expected docstring

Forwarded: https://github.com/breezy-team/breezy/pull/143
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1092458

7851. By Adrien Nader on 2025-01-08

tests: re-generate CA certificates after changes to their creation scripts

Forwarded: https://github.com/breezy-team/breezy/pull/143
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1092458

7850. By Adrien Nader on 2025-01-08

tests: use AES256 to protect the test CA private key rather than DES3

While this is not a security concern since this is for a test CA, this is
future-proofing: DES3 is outdated and it is not impossible that it this
usage does not become possible anymore in the future.

7849. By Adrien Nader on 2025-01-08

tests: fix typo "sll keys" in create_ssls.py's description

7848. By Adrien Nader on 2025-01-08

tests: generate test certificates that pass python 3.13 criteria

Python 3.13 has started requiring the authorityKeyIdentifier field as per
https://github.com/python/cpython/issues/107361 . After iterating a bit,
it appears that we only need to pass "-addext keyUsage=keyCertSign" to
openssl during CA certificate creation and the server certificate will have
the proper field.

It's also possible to use something like `trustme` to generate the
certificates but that would have been a much larger change and more work
(maybe leading to most of the script being dropped however).

Forwarded: https://github.com/breezy-team/breezy/pull/143
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1092458

7847. By Jelmer Vernooij on 2024-11-18

Drop old testtools version check

by jelmer review by jelmer

7846. By Jelmer Vernooij on 2024-11-18

Use disperse action to validate

by jelmer review by jelmer

7845. By Jelmer Vernooij on 2024-11-18

Fix compatibility with other gpg versions

by jelmer review by jelmer

7844. By Jelmer Vernooij on 2024-10-26

Cope with too many open files in dirty tracker during tests

7843. By Jelmer Vernooij on 2024-10-20

Start on 3.3.10