提交 928933f9 编写于 作者: M Matt Caswell

Fix no-dh builds

One of the new tests uses a DH based ciphersuite. That test should be
disabled if DH is disabled.
Reviewed-by: NRichard Levitte <levitte@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2217)
上级 e3bc1305
...@@ -93,14 +93,19 @@ SKIP: { ...@@ -93,14 +93,19 @@ SKIP: {
$proxy->start(); $proxy->start();
ok(TLSProxy::Message->fail, "Corrupt <=TLSv1.2 CertVerify"); ok(TLSProxy::Message->fail, "Corrupt <=TLSv1.2 CertVerify");
#Test 4: Corrupting a ServerKeyExchange signature in <=TLSv1.2 should fail SKIP: {
$proxy->clear(); skip "DH disabled", 1 if disabled("dh");
$testtype = CORRUPT_TLS1_2_SERVER_KEY_EXCHANGE;
$proxy->clientflags("-no_tls1_3"); #Test 4: Corrupting a ServerKeyExchange signature in <=TLSv1.2 should
$proxy->cipherc('DHE-RSA-AES128-SHA'); #fail
$proxy->ciphers('DHE-RSA-AES128-SHA'); $proxy->clear();
$proxy->start(); $testtype = CORRUPT_TLS1_2_SERVER_KEY_EXCHANGE;
ok(TLSProxy::Message->fail, "Corrupt <=TLSv1.2 ServerKeyExchange"); $proxy->clientflags("-no_tls1_3");
$proxy->cipherc('DHE-RSA-AES128-SHA');
$proxy->ciphers('DHE-RSA-AES128-SHA');
$proxy->start();
ok(TLSProxy::Message->fail, "Corrupt <=TLSv1.2 ServerKeyExchange");
}
} }
sub signature_filter sub signature_filter
......
Markdown is supported
0% .
You are about to add 0 people to the discussion. Proceed with caution.
先完成此消息的编辑!
想要评论请 注册