openssl/test/ct, branch dependabot/github_actions/actions/setup-python-7

Add config_diagnostics to our configuration files.

2021-08-03T22:15:14Z

The change to a more configuration based approach to enable FIPS mode operation highlights a shortcoming in the default should do something approach we've taken for bad configuration files. Currently, a bad configuration file will be automatically loaded and once the badness is detected, it will silently stop processing the configuration and continue normal operations. This is good for remote servers, allowing changes to be made without bricking things. It's bad when a user thinks they've configured what they want but got something wrong and it still appears to work. Reviewed-by: Dmitry Belyavskiy (Merged from https://github.com/openssl/openssl/pull/16171)

Use .cnf for config files, not .conf

2020-03-06T17:25:13Z

The default is openssl.cnf The project seems to prefer xxx.conf these days, but we should use the default convention. Rename all foo.conf (except for Configurations) to foo.cnf Fixes #11174 Reviewed-by: Paul Yang Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/11176)

Verify SCT signatures

2016-03-01T16:59:28Z

Tests included in future commit, which adds CT policy validation. Reviewed-by: Ben Laurie Reviewed-by: Rich Salz

Tests for parsing and printing certificates containing SCTs

2016-02-25T18:59:11Z

Reviewed-by: Ben Laurie Reviewed-by: Rich Salz