tcl_tests: ca.try: Ignore openssl crl exit status for 'corrupted CRL'…

… test Older `openssl crl` exits with 0 in regard to verify no matter actual verify status, newer `openssl crl` could exit with 1 on verify failure. Make the test backward-compatible, comparing only stderr output. Fixes: #452 Signed-off-by: Vitaly Chikunov <[email protected]>
gost-engine · Mar 22, 2024 · 769e0f7 · 769e0f7
1 parent 27245fd
commit 769e0f7
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/tcl_tests/ca.try b/tcl_tests/ca.try
@@ -88,8 +88,8 @@ test -skip {![file exists test.crl]} "Verifying CRL OK" {
 test -skip {![file exists test.crl]} "Verifying corrupted CRL" {
 	makeFile "badcrl.pem" [hackPem "\01\x1E" [getFile test.crl] "\01\0"]
 	grep verify [openssl "crl -in badcrl.pem -noout -CAfile $::test::ca/cacert.pem"]
-} 0 "verify failure
-"
+} -1 "STDERR CONTENTS:\nverify failure"
+
 
 test "Verifying CA certificate" {
 	grep "(cacert.pem|error|OK)" [openssl "verify -CAfile $::test::ca/cacert.pem $::test::ca/cacert.pem"]