Skip to content

Fix time-sensitive certificate test#464

Merged
bifurcation merged 4 commits intomainfrom
fix/certificate-test-date
Apr 11, 2026
Merged

Fix time-sensitive certificate test#464
bifurcation merged 4 commits intomainfrom
fix/certificate-test-date

Conversation

@bifurcation
Copy link
Copy Markdown
Contributor

@bifurcation bifurcation commented Apr 10, 2026

Summary

This PR fixes several issues in main that were causing CI failures:

  1. Time-sensitive certificate test - The "Test Certificate notBefore status" test had a certificate with notBefore = 2026-03-08, which is now in the past. Replaced with a certificate that has notBefore = 2099-01-01.

  2. Missing #include <functional> - PR Support custom signing routines in SignaturePrivateKey #424 added std::function usage in crypto.h but missed the include directive.

  3. Wrong preprocessor guard for PQ cipher suites - The switch case used #if !defined(P256_SHA256) (always true) instead of #if defined(WITH_PQ), causing build failures on non-PQ builds.

  4. Interop code using old array name - The interop code still used all_supported_suites instead of all_supported_cipher_suites.

Test plan

  • All HPKE tests pass locally
  • All MLS tests pass locally
  • Build succeeds with all crypto backends

🤖 Generated with Claude Code

bifurcation and others added 4 commits April 10, 2026 15:22
The "Test Certificate notBefore status" test had a certificate with
notBefore = 2026-03-08, which is now in the past, causing the test
to fail. Replace with a certificate that has notBefore = 2099-01-01
to ensure the test remains valid for decades.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
PR #424 added std::function usage but missed the include directive.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The switch case for MLKEM cipher suites used #if !defined(P256_SHA256)
which is always true. This should be #if defined(WITH_PQ) to match
the cipher definitions above.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The array was renamed from all_supported_suites to
all_supported_cipher_suites but the interop code wasn't updated.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@bifurcation bifurcation merged commit 65adfde into main Apr 11, 2026
15 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant