#130·go

DC tests don't validate certificates

Author: jhoylaCreated Aug 16, 2022Updated Aug 18, 2022

In delegated_credentials_test.go TestDCHandshakeServerAuth sets clientConfig.InsecureSkipVerify = true. Because of how golang handles global state this is propagated to all later tests. This leads to test failures if the tests are run in a different order or individually. This means that even if you put bit flips into the test certificate signatures the tests will still pass.