You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2026/01/06 11:29:12 UTC

(tomcat) branch 9.0.x updated: APR needs a trust store configured for client cert tests

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch 9.0.x
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/9.0.x by this push:
     new 8f001ef386 APR needs a trust store configured for client cert tests
8f001ef386 is described below

commit 8f001ef386f18f3cfc2376485ccd4c1759d469e7
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Tue Jan 6 11:29:05 2026 +0000

    APR needs a trust store configured for client cert tests
---
 test/org/apache/tomcat/util/net/TesterSupport.java | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/test/org/apache/tomcat/util/net/TesterSupport.java b/test/org/apache/tomcat/util/net/TesterSupport.java
index f9ff77499e..966c93ef13 100644
--- a/test/org/apache/tomcat/util/net/TesterSupport.java
+++ b/test/org/apache/tomcat/util/net/TesterSupport.java
@@ -157,6 +157,7 @@ public final class TesterSupport {
             certificate.setCertificateFile(new File(LOCALHOST_RSA_CERT_PEM).getAbsolutePath());
             certificate.setCertificateKeyFile(new File(LOCALHOST_RSA_KEY_PEM).getAbsolutePath());
             sslHostConfig.setCaCertificateFile(new File(CA_CERT_PEM).getAbsolutePath());
+            sslHostConfig.setTruststoreFile(new File(CA_JKS).getAbsolutePath());
         }
     }
 
@@ -165,6 +166,7 @@ public final class TesterSupport {
         if (protocol.contains("Apr")) {
             // Only run for OpenSSL to avoid running the test multiple times
             Assume.assumeTrue(OpenSSLImplementation.class.getName().equals(sslImplementationName));
+            // If APR is being used, the listener will have been configured in TomcatBaseTest.setUp()
         } else {
             if (useOpenSSL) {
                 LifecycleListener listener = null;


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org