From Fedora Project Wiki
Description
Sanity of crypto-policies
How to test
We will test if system actually pays attention to crypto policy setting
- Setup server using only LEGACY ciphers
- dir=$(mktemp -d) && cd $dir && echo CONNECTED >index.html && \
- openssl s_server -WWW -cert TODO -key TODO -CAfile TODO -cipher TODO
- Switch to LEGACY policy and make sure connection works
- update-crypto-policies --set LEGACY curl localhost:4433 |grep CONNECTED
- Check OpenSSL software can connect
- wget -O - localhost:4433 |grep CONNECTED
Expected Results
- Step #1 completes without error
- command prints
CONNECTED
- command prints
CONNECTED