Update CRL for 5 years (Closes: #79548)

* Add hints about what the test failure looks like
* Update the example crl update command line.
* Instead of having two copies of the CRL, replace one with a symlink.
  This way when one is updated, both are updated.

https://bugs.freedesktop.org/show_bug.cgi?id=79548
Reviewed-by: George Kiagiadakis <gkiagia@tolabaki.gr>

3 files changed, 26 insertions, 23 deletions

diff --git a/tests/certs/ca-0-crl.cfg b/tests/certs/ca-0-crl.cfg
index bc9ed25..db1cde0 100644
--- a/tests/certs/ca-0-crl.cfg
+++ b/tests/certs/ca-0-crl.cfg
@@ -1,3 +1,15 @@
+# Update crl with certtool from gnutls-bin:
+# certtool --generate-crl \
+#          --load-ca-privkey ca-0-key.pem \
+#          --load-ca-certificate ca-0-cert.pem \
+#          --load-certificate rev-cert.pem \
+#          --template ca-0-crl.cfg \
+#          --outfile=ca-0-crl.pem
+#
+# When expired the test ssl tests fail with the error:
+# assertion failed (error == (wocky_auth_error, 6)): \
+#   SSL Certificate Verification Error for weasel-juice.org (wocky-tls-cert-error, 12)
+#
 # X.509 Certificate options
 #
 # DN options
@@ -87,3 +99,5 @@ crl_signing_key
 
 # Whether this key will be used for time stamping.
 #time_stamping_key
+crl_next_update=1825
+
diff --git a/tests/certs/ca-0-crl.pem b/tests/certs/ca-0-crl.pem
index 80f47ba..2867f95 100644
--- a/tests/certs/ca-0-crl.pem
+++ b/tests/certs/ca-0-crl.pem
@@ -1,13 +1,14 @@
 -----BEGIN X509 CRL-----
-MIIB/DCB5QIBATANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJVSzESMBAGA1UE
+MIICDTCB9gIBATANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJVSzESMBAGA1UE
 ChMJQ29sbGFib3JhMRkwFwYDVQQLExBXb2NreSBUZXN0IFN1aXRlMREwDwYDVQQI
-EwhDb25mdXNlZDEbMBkGA1UEAxMSV29ja3kgWE1QUCBMaWJyYXJ5Fw0xMjA1MTAx
-NjQzNTBaFw0xMzA1MTAxNjQzNTBaMBQwEgIBCxcNMTIwNTEwMTY0MzUwWqAvMC0w
-HwYDVR0jBBgwFoAUSTAmCIya1mnNi8DMDlwCjkofpowwCgYDVR0UBAMCAQAwDQYJ
-KoZIhvcNAQELBQADggEBACFaj/M6g+fP0RQEiB7kvoocdM7XGUemkl9Ns/chc9zH
-yLgq1891jIO5GoKoCuMGEFfYat/VZutNOLFHkJ0AeqrvOSPVZ8atcZTJR/lgjR6I
-PN/UMFpHMEVa7cUtLPx47UvGDolrOo1d4ciLVUUPoZMRGxTitVz8KtEk+O9s6NjS
-W25uTGoNT58OQS51dXq4N97gNMSeggWGN1Y9swv0s992G/Y93t/uQvsRsSEMe7kj
-ddChE3Gb4I+7TkjL+e64RlYsAtvMePM3k3+Zk95wFGWqlwRow46Nv3F02C8Af5JV
-zp+tsq2foM0lIADnOTjUs2XgNGqx0Gm/hTAfBMsIgkM=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 -----END X509 CRL-----
diff --git a/tests/certs/crl/ca-0-crl.pem b/tests/certs/crl/ca-0-crl.pem
index 80f47ba..2138c26 100644..120000
--- a/tests/certs/crl/ca-0-crl.pem
+++ b/tests/certs/crl/ca-0-crl.pem
@@ -1,13 +1 @@
------BEGIN X509 CRL-----
-MIIB/DCB5QIBATANBgkqhkiG9w0BAQsFADBsMQswCQYDVQQGEwJVSzESMBAGA1UE
-ChMJQ29sbGFib3JhMRkwFwYDVQQLExBXb2NreSBUZXN0IFN1aXRlMREwDwYDVQQI
-EwhDb25mdXNlZDEbMBkGA1UEAxMSV29ja3kgWE1QUCBMaWJyYXJ5Fw0xMjA1MTAx
-NjQzNTBaFw0xMzA1MTAxNjQzNTBaMBQwEgIBCxcNMTIwNTEwMTY0MzUwWqAvMC0w
-HwYDVR0jBBgwFoAUSTAmCIya1mnNi8DMDlwCjkofpowwCgYDVR0UBAMCAQAwDQYJ
-KoZIhvcNAQELBQADggEBACFaj/M6g+fP0RQEiB7kvoocdM7XGUemkl9Ns/chc9zH
-yLgq1891jIO5GoKoCuMGEFfYat/VZutNOLFHkJ0AeqrvOSPVZ8atcZTJR/lgjR6I
-PN/UMFpHMEVa7cUtLPx47UvGDolrOo1d4ciLVUUPoZMRGxTitVz8KtEk+O9s6NjS
-W25uTGoNT58OQS51dXq4N97gNMSeggWGN1Y9swv0s992G/Y93t/uQvsRsSEMe7kj
-ddChE3Gb4I+7TkjL+e64RlYsAtvMePM3k3+Zk95wFGWqlwRow46Nv3F02C8Af5JV
-zp+tsq2foM0lIADnOTjUs2XgNGqx0Gm/hTAfBMsIgkM=
------END X509 CRL-----
+../ca-0-crl.pem
\ No newline at end of file