Skip to content

test(integration): add coverage of error types for cert related failures#5755

Merged
jmayclin merged 4 commits intoaws:mainfrom
jmayclin:2026-02-18-cert-security-policy-error
Feb 25, 2026
Merged

test(integration): add coverage of error types for cert related failures#5755
jmayclin merged 4 commits intoaws:mainfrom
jmayclin:2026-02-18-cert-security-policy-error

Conversation

@jmayclin
Copy link
Copy Markdown
Contributor

Goal

Add integration test coverage of cert related failures

Why

I'm going to be adding some more distinct error types for host name and security policy related failures. But I needed to confirm our current behavior.

So I figured I'd just add these tests as a separate PR because it will make my error change easier to review.

How

Just using our integration test harness to look at the returned error types.

Testing

I did print out the s2n-tls error message and check that I was hitting the expected line numbers for the failures, and not one of the ~14 other places that we return CERT_UNTRUSTED.

// Error encountered in lib/tls/s2n_security_policies.c:2250 - s2n_security_policy_validate_cert_signature
// Error encountered in lib/tls/s2n_security_policies.c:2269 s2n_security_policy_validate_cert_key

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@jmayclin jmayclin requested a review from maddeleine February 24, 2026 18:50
@jmayclin jmayclin enabled auto-merge February 25, 2026 01:16
@jmayclin jmayclin added this pull request to the merge queue Feb 25, 2026
Merged via the queue into aws:main with commit e070353 Feb 25, 2026
54 checks passed
@jmayclin jmayclin deleted the 2026-02-18-cert-security-policy-error branch February 25, 2026 02:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants