head	1.1;
access;
symbols;
locks; strict;
comment	@# @;


1.1
date	2026.11.03.20.22.42;	author riastradh;	state Exp;
branches;
next	;
commitid	4FIw9Ojb0gUQs32H;


desc
@@


1.1
log
@security/pkcs11-provider: Wire up tests to softhsm and nss softokn.

Otherwise they don't really test anything!  Need at least one PKCS#11
library to test this with.  softhsm and softokn from nss are the two
ones supported by the pkcs11-provider tests that I found in pkgsrc;
another, kryoptic, is not currently packaged (and pulls in Rust), so
I left it out for now.

With this, I get:

> Ok:                55
> Fail:              0
> Skipped:           71
@
text
@$NetBSD$

Bypass pkgsrc's proxy blocking when running tests that talk to a
temporary local daemon.  Otherwise the OCSP tests fail cryptically
with:

> Error querying OCSP responder
> 00E890263E700000:error:10080002:BIO routines:BIO_lookup_ex:system lib:crypto/bio/bio_addr.c:767:No address associated with hostname

--- tests/tdemoca.orig	2026-11-03 17:54:05.610335279 +0000
+++ tests/tdemoca
@@@@ -191,6 +191,7 @@@@ fi
 ossl '
 ocsp -CAfile ${DEMOCA}/cacert.pem -issuer ${DEMOCA}/cacert.pem
      -cert ${DEMOCA}/cert.pem -resp_text -noverify
+     -no_proxy 127.0.0.1
      -url http://127.0.0.1:${PORT}' $helper_emit
 output="$helper_output"
 FAIL=0
@