diff options
author | Pete Bentley <prb@google.com> | 2020-11-29 21:11:10 +0000 |
---|---|---|
committer | Pete Bentley <prb@google.com> | 2020-12-09 17:42:55 +0000 |
commit | 73bf5b6f1d49ffc1c3d769e3c7af0b1c0835a67c (patch) | |
tree | 93f6efe40702d4e75789284abf91c2b776a94e46 | |
parent | dd7692f2bc7ef567bfe01501ebfae0a158aaa421 (diff) |
[DO NOT MERGE] Reject non-ASCII hostnames and SANs.
Updates test expectations to match OkHostnameVerifier behaviour changes
in the same topic.
Bug: 171980069
Test: atest CtsLibcoreTestCases CtsLibcoreOkHttpTestCases
Change-Id: If66bf77754466daf8684ffae058180fd702dabc4
Merged-In: I7ccd2c6d4255d29112e9a6d58640316c364bf67a
-rw-r--r-- | harmony-tests/src/test/java/org/apache/harmony/tests/javax/net/ssl/HostnameVerifierTest.java | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/harmony-tests/src/test/java/org/apache/harmony/tests/javax/net/ssl/HostnameVerifierTest.java b/harmony-tests/src/test/java/org/apache/harmony/tests/javax/net/ssl/HostnameVerifierTest.java index e6978385e0..96384adba2 100644 --- a/harmony-tests/src/test/java/org/apache/harmony/tests/javax/net/ssl/HostnameVerifierTest.java +++ b/harmony-tests/src/test/java/org/apache/harmony/tests/javax/net/ssl/HostnameVerifierTest.java @@ -78,7 +78,7 @@ public class HostnameVerifierTest extends TestCase implements assertFalse(verifier.verify("a.foo.com", session)); assertTrue(verifier.verify("bar.com", session)); assertFalse(verifier.verify("a.bar.com", session)); - // The certificate has this name in the altnames section, but Conscrypt drops + // The certificate has this name in the altnames section, but OkHostnameVerifier drops // any altnames that are improperly encoded according to RFC 5280, which requires // non-ASCII characters to be encoded in ASCII via Punycode. assertFalse(verifier.verify("\u82b1\u5b50.co.jp", session)); @@ -129,11 +129,11 @@ public class HostnameVerifierTest extends TestCase implements assertFalse(verifier.verify("a.b.foo.com", session)); assertFalse(verifier.verify("bar.com", session)); assertTrue(verifier.verify("www.bar.com", session)); - assertTrue(verifier.verify("\u82b1\u5b50.bar.com", session)); assertFalse(verifier.verify("a.b.bar.com", session)); - // The certificate has this name in the altnames section, but Conscrypt drops + // The certificate has this name in the altnames section, but OkHostnameVerifier drops // any altnames that are improperly encoded according to RFC 5280, which requires // non-ASCII characters to be encoded in ASCII via Punycode. + assertFalse(verifier.verify("\u82b1\u5b50.bar.com", session)); assertFalse(verifier.verify("\u82b1\u5b50.co.jp", session)); assertFalse(verifier.verify("a.\u82b1\u5b50.co.jp", session)); } |