Send no_renegotiation alert as required by spec.

[oweals/openssl.git] / test / testss.com

diff --git a/test/testss.com b/test/testss.com
index ce2c4b43f66d786c8fbd54aa2307f499c63df485..6598106b09d488bbb6e87980061f8d317cb608a3 100644 (file)
--- a/test/testss.com
+++ b/test/testss.com
@@ -1,10 +1,12 @@
 $! TESTSS.COM
 $
 $      __arch := VAX
-$      if f$getsyi("cpu") .ge. 128 then __arch := AXP
+$      if f$getsyi("cpu") .ge. 128 then -
+          __arch = f$edit( f$getsyi( "ARCH_NAME"), "UPCASE")
+$      if __arch .eqs. "" then __arch := UNK
 $      exe_dir := sys$disk:[-.'__arch'.exe.apps]
 $
-$      digest="-mdc2"
+$      digest="-md5"
 $      reqcmd := mcr 'exe_dir'openssl req
 $      x509cmd := mcr 'exe_dir'openssl x509 'digest'
 $      verifycmd := mcr 'exe_dir'openssl verify
@@ -23,7 +25,20 @@ $    Ucert="""certU.ss"""
 $
 $      write sys$output ""
 $      write sys$output "make a certificate request using 'req'"
-$      'reqcmd' -config 'CAconf' -out 'CAreq' -keyout 'CAkey' -new ! -out err.ss
+$
+$      set noon
+$      define/user sys$output nla0:
+$      mcr 'exe_dir'openssl no-rsa
+$      save_severity=$SEVERITY
+$      set on
+$      if save_severity
+$      then
+$          req_new="-newkey dsa:[-.apps]dsa512.pem"
+$      else
+$          req_new="-new"
+$      endif
+$
+$      'reqcmd' -config 'CAconf' -out 'CAreq' -keyout 'CAkey' 'req_new' ! -out err.ss
 $      if $severity .ne. 1
 $      then
 $              write sys$output "error using 'req' to generate a certificate request"
@@ -73,7 +88,7 @@ $
 $      write sys$output ""
 $      write sys$output "make another certificate request using 'req'"
 $      define /user sys$output err.ss
-$      'reqcmd' -config 'Uconf' -out 'Ureq' -keyout 'Ukey' -new
+$      'reqcmd' -config 'Uconf' -out 'Ureq' -keyout 'Ukey' 'req_new'
 $      if $severity .ne. 1
 $      then
 $              write sys$output "error using 'req' to generate a certificate request"