DC tests don't validate certificates
Author: jhoylaCreated Aug 16, 2022Updated Aug 18, 2022
In delegated_credentials_test.go TestDCHandshakeServerAuth sets clientConfig.InsecureSkipVerify = true. Because of how golang handles global state this is propagated to all later tests. This leads to test failures if the tests are run in a different order or individually.
This means that even if you put bit flips into the test certificate signatures the tests will still pass.
Source: cloudflare/go