[openssl/openssl] d6c49d: apps: cover the x509 -sigopt and -vfyopt options

"'Jakub Zelenka' via openssl-commits" <[email protected]> Mon, 13 Jul 2026 08:42:35 -0700
Newsgroups gmane.comp.encryption.openssl.cvs
Message-ID <openssl/openssl/push/refs/heads/master/[email protected]>
  Branch: refs/heads/master
  Home:   https://github.com/openssl/openssl
  Commit: d6c49df0396e9b49c4d2ddd8ae1c39b70d4995d1
      https://github.com/openssl/openssl/commit/d6c49df0396e9b49c4d2ddd8ae1c39b70d4995d1
  Author: Jakub Zelenka <[email protected]>
  Date:   2026-07-13 (Mon, 13 Jul 2026)

  Changed paths:
    M test/recipes/25-test_x509.t

  Log Message:
  -----------
  apps: cover the x509 -sigopt and -vfyopt options

The -sigopt and -vfyopt options of the x509 app were previously
untested. It adds a subtest that signs a certificate from a CSR with
-sigopt rsa_padding_mode:pss and verifies the issued certificate uses
the rsassaPss signature algorithm, and that verifies an SM2 CSR whose
self-signature uses a non-default distinguishing id supplied via
-vfyopt. It also checks that an unknown -sigopt or -vfyopt makes the
command fail.

Assisted-by: Claude:claude-opus-4-8

Reviewed-by: Paul Dale <[email protected]>
Reviewed-by: Tomas Mraz <[email protected]>
MergeDate: Mon Jul 13 15:41:57 2026
(Merged from https://github.com/openssl/openssl/pull/31908)



To unsubscribe from these emails, change your notification settings at https://github.com/openssl/openssl/settings/notifications

-- 
You received this message because you are subscribed to the Google Groups "openssl-commits" group.
To unsubscribe from this group and stop receiving emails from it, send an email to [email protected].
To view this discussion visit https://groups.google.com/a/openssl.org/d/msgid/openssl-commits/openssl/openssl/push/refs/heads/master/283f6b-d6c49d%40github.com.