Cert had expired and was not considered an error

Author: timlegge

t/03-verify-bad-cert.t

@@ -1,3 +1,5 @@
+use strict;
+use warnings;
 use Test::More;
 use Crypt::OpenSSL::Verify;
 use Crypt::OpenSSL::X509;
@@ -7,28 +9,32 @@ isa_ok($v, 'Crypt::OpenSSL::Verify');
 
 my $text =<<CERT;
 -----BEGIN CERTIFICATE-----
-MIIEGDCCA4GgAwIBAgIBAjANBgkqhkiG9w0BAQUFADAcMQswCQYDVQQGEwJVSzEN
-MAsGA1UEAxMEdGVzdDAeFw0wNzA3MDExMzQyNTRaFw0wODA2MzAxMzQyNTRaMCMx
-CzAJBgNVBAYTAlVLMRQwEgYDVQQDFAtURVNUX0NMSUVOVDCCAiIwDQYJKoZIhvcN
-AQEBBQADggIPADCCAgoCggIBAOnYoi4lwo+Nj+MX1hmNlWXfXIyOLKlY0uAcF7zm
-lH8RG6XjMOsA19g71jyfHYuNfR+aQXTPgJ+B2Nnyr9EUF3XUuNKrmDaM4jtiqBZJ
-RRiNmfwlWfcdlyTUPXSDu3s2II7wteCcOiHo20jMwSvRo1SFpOLCixnn1UYeA/Ni
-cdWgVCNGuMOKAdK200CpWR2VnHIUvJ6uWz8zjhV9iiB6La7uqkf/9xmyNh8zUb/q
-nqi5HXY0ygLscgoFfSfu/TLJ/8OjLkA7PaHQ4zYb9AmBJQJChwb9DOZ9CcKxOkxG
-IuOPInxFoTUdoHWRgfskAMnBHt49NXKKYRejk6hne1y0cvpSqq4TXF9/VvKravug
-obumQU5MAFGW/UTTHaAx9vruu6JGPzDLzpMrFUXFJybcZgsTe3KKpYnosnpMzuhn
-XmSRyfJySJquVY+5LuivwkRCUSJsA1NgvIEatm7EkQzHYh1S5vcckd8jXRzHGz70
-zoV6z1JVIWoOa1riXj6ebs79+x1WFH4y/X6l3JQNB00BE5YNqemp+UBafnGXxKfH
-L2E/U/LfV8lKycFyIiPgvsxcI+b5IUh2tjT8MmCV7XvwDksvvOQv3qKIA+4Sr3g3
-lf4t81ncM5lxtLrwcHCc/H48bpinKq9UyliLt5ZItCp75QBNAB1qnFkjUspeigDM
-KYMDAgMBAAGjgd4wgdswCQYDVR0TBAIwADARBglghkgBhvhCAQEEBAMCBLAwKwYJ
-YIZIAYb4QgENBB4WHFRpbnlDQSBHZW5lcmF0ZWQgQ2VydGlmaWNhdGUwHQYDVR0O
-BBYEFM1CNhwgAjgbKAwzClbJYUXAFBorMEwGA1UdIwRFMEOAFAG3g0vMcVpEHfe1
-Yao0gpWJXAHLoSCkHjAcMQswCQYDVQQGEwJVSzENMAsGA1UEAxMEdGVzdIIJANQs
-vM8fe7IuMAkGA1UdEgQCMAAwCQYDVR0RBAIwADALBgNVHQ8EBAMCBaAwDQYJKoZI
-hvcNAQEFBQADgYEACgl1sxEPVgsK8sTYCF+OhTIrZ5fhhmCf5kunCWvLeMcTJtNP
-1kwCVlDz8GhYVQOnhy5fPzjKE/G6JB7H8s2MioNtW265H2xRQx0FlO/eldqNTqRC
-7TAJ6y/TH2zA3Y7IvJWpvLBVRp3bEClyXM9WJH9x7ByHGGly6OWKwWUc1QQ=
+MIIEwjCCAqoCCQDUW/qSgnKE7jANBgkqhkiG9w0BAQsFADAjMQswCQYDVQQGEwJV
+SzEUMBIGA1UEAwwLVEVTVF9DTElFTlQwHhcNMjIwMjIxMjEzMTQ4WhcNMzIwMjE5
+MjEzMTQ4WjAjMQswCQYDVQQGEwJVSzEUMBIGA1UEAwwLVEVTVF9DTElFTlQwggIi
+MA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDaVuz19yglZ/REN0q8qy623WaH
+lrRTgSnrUtvr5nz7liBXvTmo1KAfXPwltOThgd5BoQXyRzIqe3nKTWfwLjEEXhWg
+80txYtjk0fBn4WoihxDcjNAgtirBha+eqVx+RG9vBNcUhobEtVe0/+3XkSeUeGRW
+OIbL5WMlNp4zwKtd8375EyjakYDfcc4e/ho5zJv0UqgxI/Zyh1PT6Ed3apIh6I1Y
+ecnCCEQjlc0UJ5EVTZlgOFGDs5w0SrbBQQWIEdcQAsvd0qjhj5Z6CBXONN+KVpy9
+jhwA4s/RTT2MvN/eMU4GrOJfqqkjZ7NCeY64MLwGT5ynVNC7FpZyJaXw1leak/rw
+/qiCkJSG53B6dXLDfUgtLuk7qGM2NLB3EYgVe9/iXklxrpEKbZ/0l8QamIq2cJqV
+66dlvMhORjccSrxO03wYYsU7w4gHHyGcpSkHiyQIXuXopABJJ+9hFgvXJ1UJXMdK
+GeRGamx/SPega22wj8B2sXPug5EgfnFWrOChfcL0PfSwZWN5XfQr9qUZhml8L0nm
+lDOJAt9vlnXOw3B2rXEO4oaTGtTqDjHSWh9A3x3v12d8hEyxmAXG6IL2UDB8qxuw
+W8Rw8ctrYJ6bJsuvYVWlTHZDNL85FDNoA8Z+ThX/gKgXf5WN7+h2BStdcEHjz0Bm
+AaeMm9Pyxe2B9ejKgwIDAQABMA0GCSqGSIb3DQEBCwUAA4ICAQAFbW5iiZrfJFau
+g7cVmrzEMWHFRaZrnIgPAcVWOt76tEJu2uDWe8tjIMDekD/1vcxJ5SdWH9zJQxsT
+jDWvFVle+henWLVR9/2EsmA4B2l/lJ2x3eBs9PwhQQt2W4V3PVlOplYL18cBUjNP
+74PdEUc7PBi+ddbYgYZmIHZL4A0zhbb99xnDANIdbFRwR9d1OMgD4MXt+35w3I92
+VaMXvZWRxFI85100k/mJO3W8yQ9DRMUHuRjeZPuIFOHbHtpl3xQ8nGiR7XD7iIMS
+EuH+Ropm0zz7fgZHk4DaCWElYbbak1yGHnsH9eig1zsa2yAOOvWSd2IyYvFqsioN
+Mt4amwY+a+WyVEIA3e4Z22YSJ1/R2COcXETV6PBCkpduFt9B2njIeLEvW607CQgY
+hGj37bOFszNrhZtP2c3aBQ6RTOJnwyYB3xnhvCpSL/sndC2itg9uHLonQNfsaQSp
+9I1sMqfj1j1bS1Ai2VHtge85bwQQvOY3tw+ctCJC3pi6WcwCiHXTxVQHbU34v9JT
+QqALBJHwSPH++2iRuFVaNsALkUQCKLtbIFsKCRjJIt8QRJ2DgdUPvhpKDBUHRhfr
+Mav2gnzx60cUL/CnoQeosYsx2bLWN0WwCYsdYr/484DbMC4UEvCc+oGXDJfWAgS+
+Gx8CghoNtEXNLm2fPBd9Gc6DzkwlLg==
 -----END CERTIFICATE-----
 CERT
 
@@ -39,23 +45,22 @@ my $ret;
 eval {
         $ret = $v->verify($cert);
 };
-ok($@ =~ /(verify: certificate has expired)|(verify: unable to get local)|(verify: unknown certificate)/);
-ok(!$ret);
 
 $v = Crypt::OpenSSL::Verify->new(
     't/cacert.pem',
     {
-    CApath => '/etc/ssl/certs',
-    noCAfile => 0,
-}
-    );
+        CApath => '/etc/ssl/certs',
+        noCAfile => 0,
+    }
+);
 isa_ok($v, 'Crypt::OpenSSL::Verify');
 
 $ret = undef;
 eval {
         $ret = $v->verify($cert);
 };
-ok($@ =~ /(verify: certificate has expired)|(verify: unable to get local)|(verify: unknown certificate)/);
+
+ok($@ =~ /verify: /);
 ok(!$ret);
 
 done_testing;