The fake https server used in the functional tests generates a CA and
a server certificate that recent Python and urllib3 reject:
- The CA certificate has no basicConstraints=CA:TRUE. Python 3.13
enables VERIFY_X509_STRICT by default and rejects such a certificate
as "invalid CA certificate".
- The server certificate has no subjectAltName. urllib3 2.x no longer
falls back to the CN for hostname verification, so every request
from tacker to the fake server fails with a hostname mismatch.
Add the required extensions to the CSRs and copy them into the signed
certificates so that the https functional tests work with recent
runtimes.
Change-Id: Id6e72c77bb547f51ff5218e10ea1e5150f9377eb
Signed-off-by: Yasufumi Ogawa <yasufum.o@gmail.com>
Yasufumi Ogawa
f86f86bb06