summaryrefslogtreecommitdiff
path: root/src/regress/usr.bin/openssl
diff options
context:
space:
mode:
authortb <>2022-02-05 18:34:06 +0000
committertb <>2022-02-05 18:34:06 +0000
commit28b1970bee19f8f767c738fb89dbe3ae1e5fe05f (patch)
treeeee24b1a2e2c9478aa888ab55fde7f93fcb68880 /src/regress/usr.bin/openssl
parentdd2cc4aae10ad27fe8a36547c4658bf841bef6bb (diff)
downloadopenbsd-28b1970bee19f8f767c738fb89dbe3ae1e5fe05f.tar.gz
openbsd-28b1970bee19f8f767c738fb89dbe3ae1e5fe05f.tar.bz2
openbsd-28b1970bee19f8f767c738fb89dbe3ae1e5fe05f.zip
Add a workaround due to OpenSSL's limitation of SSL_CTX_set_cipher_list
SSL_CTX_set_cipher_list() in OpenSSL 1.1 does not accept TLSv1.3 ciphers. This wasn't a problem until now since the AEAD- ciphers were counted as distinct from TLS_ ciphers by the regress test, so they were never used in the {run,check}-cipher-${cipher}-client-${clib}-server-${slib} tests With the renaming, the TLSv1.3 ciphers are now considered as common ciphers, so they're tested. With openssl11 this results in 0:error:1410D0B9:SSL routines:SSL_CTX_set_cipher_list:no cipher match:ssl/ssl_lib.c:2573: The design of these tests doesn't allow easily adding a call to SSL_CTX_set_ciphersuites (since they also need to work with openssl 1.0.2) so skip the TLS_* ciphers for the time being.
Diffstat (limited to 'src/regress/usr.bin/openssl')
0 files changed, 0 insertions, 0 deletions