Restore invalid client cert test

Error is now returned on reading invalid client cert if running with
jruby-openssl v0.14.4 or newer.

Signed-off-by: Tero Saarni <[email protected]>

Author: tsaarni

spec/fixtures/certs.yaml

@@ -31,7 +31,11 @@ sans:
 subject: cn=client
 issuer: cn=ca
 key_type: RSA
+not_before: 1970-01-01T00:00:00Z
+not_after: 2100-01-01T00:00:00Z
 ---
 subject: cn=client-ec
 issuer: cn=ca
 key_type: EC
+not_before: 1970-01-01T00:00:00Z
+not_after: 2100-01-01T00:00:00Z

spec/fixtures/client-key.pem

@@ -1,28 +1,28 @@
 -----BEGIN PRIVATE KEY-----
-MIIEvwIBADANBgkqhkiG9w0BAQEFAASCBKkwggSlAgEAAoIBAQCnPqjlJMF4uvsN
-t1kdrVP/Zi3KS3dvCg2Dpg1BAyo0nhe8vKHAAK0TE9//peTOqt5P+hps7fw4SG3N
-ZNmmkOk8u6B0I15FLHywTsMPU9H+gLrte8Y/yZC4AbdmVrYFml83Q41wGj8UM05t
-pslVMfkveNkG/LBzKrPENo2Wb2+2/Um/BzNsaX0bhg7MGesD8TjhMFmh+kvChUMp
-jFK4dKDOlXFMBLd43wtNVeWDz7duNx/oz6LyQ5JsAmVCHCMxlgc4GQEeUJ2lEnkI
-Jw+lwDCKutwIQ4lm6pWAm4KU/BTcA7h6PWM0ku6XnfW7/xbT0FdeKnga8uTO8+vM
-7/GqawGLAgMBAAECggEAdJl38QG2LTDXNVHdvJYKGOapB/+jTfQJRf5wASJuu255
-CCnO72jJQaK6qaaEJh30jnfFEqq9DJRakTc9kyY2phP9otrBr6J7cAQJdFcw8anY
-KRgBOJmT3uW7cosDrlZZCdN7+WsjDTdT95ivh0km/JTZYkir0C82U5bhEb+xeDZv
-f/76b1gDYz3ZrvQMnb4x+60vb9U7iVrnXNEVxle/FhpLNbA9tsFLoSsm/6SbEnju
-cyimwmkMnQhPdiN5wmdTzXaTTsM3Ayomtj2bZZMTM9VSrFYAFPYAh2GwX7xn1hmo
-gacYqZcXgqu+uIE812hbWEAFmaS3vrxNVAXwa7IjkQKBgQDeR9EdabphDryvgjgA
-MUm5TxKKp5Wm9Cz+FiEUASFxoduuCdSb4vq2YGL5PL22MNxmMtYq2oc/dZOMtr45
-hruq0IZmVBNlViqjjcY1J3zvBRWSn93JdSY32o3g3rpgx6/6AZvUzfJmbwVcZBZR
-VimCf6oknoNt3lADEJXaVtYBAwKBgQDAnYyGPrufS52dRinnuFVImKX/FvbFDYJI
-F31cfi2y4y+g0tFFh0vjG0qVkxkBII5Cy5y1brLYColVWd8gWKibQMJ0TVZfV1ez
-gAkR69XIdMLlHl5oXzwyaMYLnsx6MYgzPRHB2ojhtGiEym0dUUrzovl4zB9+LpRd
-z6hpMoti2QKBgQDPWo9osMh84hKCZyd2hoQPqgPR9KNWK1INdPdGggeAyUz0/Zao
-FQVsPF4XwuH2o332mFXRhCnGuRf7nD23zEglAIFf0+6ECe2cxRSxYTTahBOrxBZR
-aEdOs0LHEv8qaR1wSy/jRHtrswV9OqDXH1l5sz41CunwBAL/2Ojx1S+toQKBgQCB
-iPK6TXIMXOPwowEHjtX77nykIqNuPfmB1ho+m7TL+zFKrLyET8rfPrlYAgbs1SIX
-Faub8Ihh9iQJvFjr/fPWBSVA5cnScIDQfKic3sd0+eEgCN5gvrtTA1c89Vx6SNlZ
-7BYHEpq/f35S33emIceQNegkLtJ3H4gz1rVhmdZXcQKBgQCl1OvIJI7FmBzG1XPz
-VNkE1nCPhXZEnrR3csZsiJiHCkI+t7izoIwFZZnEaW/+rqrZAWjMdFu11hy0Fz1n
-y74CmHrlupOoSbNZlB7w7MfqZydqXT6XXgjHdlnR9+celzkS7HnZ/jxwJChCnznm
-JR8q9KOY82PMpTHNnlEoUDqCJA==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 -----END PRIVATE KEY-----

spec/fixtures/client.pem

@@ -1,18 +1,18 @@
 -----BEGIN CERTIFICATE-----
-MIIC0zCCAbugAwIBAgIIF4RwxFvwiMEwDQYJKoZIhvcNAQELBQAwDTELMAkGA1UE
-AxMCY2EwHhcNMjMwOTEzMTEwOTA4WhcNMjQwOTEyMTEwOTA4WjARMQ8wDQYDVQQD
-EwZjbGllbnQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPqjlJMF4
-uvsNt1kdrVP/Zi3KS3dvCg2Dpg1BAyo0nhe8vKHAAK0TE9//peTOqt5P+hps7fw4
-SG3NZNmmkOk8u6B0I15FLHywTsMPU9H+gLrte8Y/yZC4AbdmVrYFml83Q41wGj8U
-M05tpslVMfkveNkG/LBzKrPENo2Wb2+2/Um/BzNsaX0bhg7MGesD8TjhMFmh+kvC
-hUMpjFK4dKDOlXFMBLd43wtNVeWDz7duNx/oz6LyQ5JsAmVCHCMxlgc4GQEeUJ2l
-EnkIJw+lwDCKutwIQ4lm6pWAm4KU/BTcA7h6PWM0ku6XnfW7/xbT0FdeKnga8uTO
-8+vM7/GqawGLAgMBAAGjMzAxMA4GA1UdDwEB/wQEAwIFoDAfBgNVHSMEGDAWgBRN
-ukfgtxJMkwu7XMvQ8ETWqi5BVTANBgkqhkiG9w0BAQsFAAOCAQEAkyK273ywVTm8
-SFssX0igt/sGDD/PMy9D9X5ovg7083g6FFYqdP9bWrkIasXzVb5s0feeV/tAV+DO
-sDjHcR7K5SwBjsNdYA+wie5WC1XaKAxSVNfe+VnwbZcgXaHcKPeqG7S3ZHJ3riRh
-GTPMArnb/w9+RqWTTSsxEvzw1lPVVbqFDiAPHsg6FTKetNEr83xbOzk4EOAnD2Hq
-CgKstcxl+lm8kaIhz1Jd5wVZ68i/+wDLRtk16inkoKIQYFvksdoMjNQLfhc5Cx+h
-4+3gOylszUF92SSbipFmEBs5LJ88G3U35xHS/imI9OdsMNdj4HE9Tk7TiuYH3Kt7
-DUOgg4S+0w==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 -----END CERTIFICATE-----

spec/outputs/syslog_tls_spec.rb

@@ -109,6 +109,19 @@
   context "read PEM" do
     let(:options) { { "host" => "localhost", "port" => port, "protocol" => "ssl-tcp", "ssl_verify" => true } }
 
+    context "invalid client certificate" do
+      let(:options ) { super().merge(
+        "ssl_cert" => File.join(FIXTURES_PATH, "invalid.pem"),
+        "ssl_key" => File.join(FIXTURES_PATH, "client-key.pem"),
+        "ssl_cacert" => File.join(FIXTURES_PATH, "ca.pem"),
+        "ssl_crl"  => File.join(FIXTURES_PATH, "ca-crl.pem")
+      ) }
+
+      it "register raises error" do
+        expect { subject.register }.to raise_error(OpenSSL::X509::CertificateError, /malformed PEM data/)
+      end
+    end
+
     context "RSA certificate and private key" do
       let(:options ) { super().merge(
         "ssl_cert" => File.join(FIXTURES_PATH, "client.pem"),