3 ms·
Private keys for tests should be generated on demand, lest you induce CI failure due to key expiration some years down the line
by xvector 5y ago
Private keys for tests should be generated on demand, lest you induce CI failure due to key expiration some years down the line
- tyingq 5y agoI'm somewhat surprised how many keygen type tools don't support ways to do that without putting a passphrase on a command line. Gpg is nice, with --passphrase-fd.
- dilyevsky 5y agoKeys (at least rsa,ec,ssh ones) don’t expire - certs do. Also you’re not required to set expiration at all and probably should not in test for the very reason you mentioned. Unless you’re testing expiration validation of course in which case cert will be intentionally expired.