[ruby/openssl] Relax error message check for OpenSSL 3.1

nobu · hsbt · commit 2864f0696b9c · 2025-02-14T15:58:21.000+09:00
A tentative measures fo ruby/openssl#606. With OpenSSL 3.1.0, the error message at connection using "self-signed certificate" seems to return `SSL_R_TLSV1_ALERT_UNKNOWN_CA` instead of `SSL_R_CERTIFICATE_VERIFY_FAILED`. ruby/openssl@fc4629d246
diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb
@@ -998,9 +998,7 @@ def test_connect_certificate_verify_failed_exception_message
     start_server(ignore_listener_error: true) { |port|
       ctx = OpenSSL::SSL::SSLContext.new
       ctx.set_params
-      # OpenSSL <= 1.1.0: "self signed certificate in certificate chain"
-      # OpenSSL >= 3.0.0: "self-signed certificate in certificate chain"
-      assert_raise_with_message(OpenSSL::SSL::SSLError, /self.signed/) {
+      assert_raise_with_message(OpenSSL::SSL::SSLError, /certificate/) {
         server_connect(port, ctx)
       }
     }

Original file line number	Diff line number	Diff line change
`@@ -998,9 +998,7 @@ def test_connect_certificate_verify_failed_exception_message`
`998`	`998`	`start_server(ignore_listener_error: true) { \|port\|`
`999`	`999`	`ctx = OpenSSL::SSL::SSLContext.new`
`1000`	`1000`	`ctx.set_params`
`1001`		`- # OpenSSL <= 1.1.0: "self signed certificate in certificate chain"`
`1002`		`- # OpenSSL >= 3.0.0: "self-signed certificate in certificate chain"`
`1003`		`- assert_raise_with_message(OpenSSL::SSL::SSLError, /self.signed/) {`
	`1001`	`+ assert_raise_with_message(OpenSSL::SSL::SSLError, /certificate/) {`
`1004`	`1002`	`server_connect(port, ctx)`
`1005`	`1003`	`}`
`1006`	`1004`	`}`