diff --git a/pkg/ca/common_test.go b/pkg/ca/common_test.go index 30723b3ec..4deef68d1 100644 --- a/pkg/ca/common_test.go +++ b/pkg/ca/common_test.go @@ -127,12 +127,12 @@ func TestVerifyCertChain(t *testing.T) { // Failure: Weak key weakSubCert, weakSubKey, _ := test.GenerateWeakSubordinateCA(rootCert, rootKey) err = VerifyCertChain([]*x509.Certificate{weakSubCert, rootCert}, weakSubKey) - if err == nil || !strings.Contains(err.Error(), "unsupported ec curve") { + if err == nil || !strings.Contains(err.Error(), "ECDSA curve P-224 not allowed") { t.Fatalf("expected error verifying weak cert chain: %v", err) } // Failure: Empty chain - err = VerifyCertChain([]*x509.Certificate{}, weakSubKey) + err = VerifyCertChain([]*x509.Certificate{}, subKey) if err == nil || !strings.Contains(err.Error(), "certificate chain must contain at least one certificate") { t.Fatalf("expected error verifying with empty chain: %v", err) }