> On 2020-05-19, at 10:01 AM, Tobias Pape <Das.Linux at gmx.de> wrote:
> 
> 
>> On 19.05.2020, at 01:45, tim Rowledge <tim at rowledge.org> wrote:
>> 
>> As an aside, Squeak 5.3-19435 running on the 20200429xxxxx ARMv6linux VM still fails the SSL test, but I think we established that the certificate included in the image for testing is a bit out of date?
>> 
>> 
> 
> It is. But it already was when Andreas poured its contents into the image…
> so it may be on purpose?
> 
> What's the remedy?
> A long-term self-singed cert? This is only marginally better to test whether certificate checking works and no better to test whether TLS-encryption works :)

I'd imagine that we could do with several options; one that should work, one that should fail because of out of date, one with broken CN, etc. Might it be practical to set up a site from where we could download the example certificates when running the tests rather than cluttering up the normal image? Part of the test of course would be whether the examples could be downloaded :-)

tim
--
tim Rowledge; tim at rowledge.org; http://www.rowledge.org/tim
To succeed in politics, it is often necessary to rise above your principles.