From 90c70235c6fe2f498764aa307c81725f3bc9f60c Mon Sep 17 00:00:00 2001 From: tb <> Date: Thu, 7 Jul 2022 13:11:45 +0000 Subject: Add some minimal regress coverage for the security level. From beck --- src/regress/lib/libssl/unit/cipher_list.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/src/regress/lib/libssl/unit/cipher_list.c b/src/regress/lib/libssl/unit/cipher_list.c index 9a5d978140..0623dd69eb 100644 --- a/src/regress/lib/libssl/unit/cipher_list.c +++ b/src/regress/lib/libssl/unit/cipher_list.c @@ -1,4 +1,4 @@ -/* $OpenBSD: cipher_list.c,v 1.10 2021/01/09 12:39:22 tb Exp $ */ +/* $OpenBSD: cipher_list.c,v 1.11 2022/07/07 13:11:45 tb Exp $ */ /* * Copyright (c) 2015 Doug Hogan * Copyright (c) 2015 Joel Sing @@ -180,6 +180,7 @@ main(void) /* Use TLSv1.2 client to get all ciphers. */ CHECK_GOTO((ctx = SSL_CTX_new(TLSv1_2_client_method())) != NULL); CHECK_GOTO((s = SSL_new(ctx)) != NULL); + SSL_set_security_level(s, 2); if (!ssl_bytes_to_list_alloc(s, &ciphers)) goto err; @@ -190,6 +191,10 @@ main(void) if (!ssl_bytes_to_list_invalid(s, &ciphers)) goto err; + SSL_set_security_level(s, 3); + if (ssl_list_to_bytes_scsv(s, &ciphers)) + goto err; + rv = 0; err: -- cgit v1.2.3-55-g6feb