Enable test-renegotiation-changed-clienthello.py but skip

"drop extended_master_secret in renegotiation" since we don't
support this extension.

1 files changed, 7 insertions, 1 deletions

diff --git a/src/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py b/src/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
index 6f3bd9d8bf..e506c3ebce 100644
--- a/src/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
+++ b/src/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
@@ -1,4 +1,4 @@
-#   $OpenBSD: tlsfuzzer.py,v 1.38 2021/04/14 14:54:30 tb Exp $
+#   $OpenBSD: tlsfuzzer.py,v 1.39 2021/04/23 21:01:45 tb Exp $
 #
 # Copyright (c) 2020 Theo Buehler <tb@openbsd.org>
 #
@@ -390,6 +390,12 @@ tls12_tests = TestGroup("TLSv1.2 tests", [
         "-X", substitute_alert("illegal_parameter", "decode_error"),
     ]),
 
+    # Skip extended_master_secret test. Since we don't support this
+    # extension, we don't notice that it was dropped.
+    Test("test-renegotiation-changed-clienthello.py", [
+        "-e", "drop extended_master_secret in renegotiation",
+    ]),
+
     # Without --sig-algs-drop-ok, two tests fail since we do not currently
     # implement the signature_algorithms_cert extension (although we MUST).
     Test("test-sig-algs-renegotiation-resumption.py", ["--sig-algs-drop-ok"]),