From 22b8d7b2b2ca8e6f295eed3e801d851d279962ea Mon Sep 17 00:00:00 2001 From: Jun Aruga Date: Mon, 26 Oct 2026 17:47:41 +0000 Subject: [PATCH] test_ssl.rb: Refactor test_pqc_sigalg * Align key numbers with the pattern in test/openssl/utils.rb setup: rsa-1 for CA, rsa-2 for server, rsa-3 for client. * Use rsa-2 for server, because rsa-1 is already used for CA (@ca_key, @ca_cert). * Use mldsa65-1 for CA and mldsa65-2 for server. Assisted-by: Claude:Opus 4.6 --- test/openssl/test_ssl.rb | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb index 78b45934a..e67998f6a 100644 --- a/test/openssl/test_ssl.rb +++ b/test/openssl/test_ssl.rb @@ -2154,13 +2154,14 @@ def test_pqc_sigalg # PQC algorithm ML-DSA (FIPS 204) is supported on OpenSSL 3.5 or later. return unless openssl?(3, 5, 0) - mldsa = Fixtures.pkey("mldsa65-1") - mldsa_ca_key = Fixtures.pkey("mldsa65-2") + mldsa_ca_key = Fixtures.pkey("mldsa65-1") mldsa_ca_cert = issue_cert(@ca, mldsa_ca_key, 1, @ca_exts, nil, nil, digest: nil) + mldsa = Fixtures.pkey("mldsa65-2") mldsa_cert = issue_cert(@svr, mldsa, 60, [], mldsa_ca_cert, mldsa_ca_key, digest: nil) - rsa = Fixtures.pkey("rsa-1") + # rsa-1 is used for @ca_key + rsa = Fixtures.pkey("rsa-2") rsa_cert = issue_cert(@svr, rsa, 61, [], @ca_cert, @ca_key) sctx = OpenSSL::SSL::SSLContext.new