From fcc4c7b50e2b86b55823dda5fe0622d8fe00bf31 Mon Sep 17 00:00:00 2001 From: tb <> Date: Sat, 3 May 2025 08:37:28 +0000 Subject: Verify that the selected key share is indeed group 29 From Kenjiro Nakayama --- src/regress/lib/libssl/tlsext/tlsexttest.c | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) (limited to 'src') diff --git a/src/regress/lib/libssl/tlsext/tlsexttest.c b/src/regress/lib/libssl/tlsext/tlsexttest.c index 32bad7ebc8..68584998ce 100644 --- a/src/regress/lib/libssl/tlsext/tlsexttest.c +++ b/src/regress/lib/libssl/tlsext/tlsexttest.c @@ -1,4 +1,4 @@ -/* $OpenBSD: tlsexttest.c,v 1.93 2025/04/30 13:44:54 tb Exp $ */ +/* $OpenBSD: tlsexttest.c,v 1.94 2025/05/03 08:37:28 tb Exp $ */ /* * Copyright (c) 2017 Joel Sing * Copyright (c) 2017 Doug Hogan @@ -3740,6 +3740,11 @@ test_tlsext_keyshare_client(void) FAIL("Did not select a key share"); goto done; } + if (tls_key_share_group(ssl->s3->hs.key_share) != 29) { + FAIL("wrong key share group: got %d, expected 29\n", + tls_key_share_group(ssl->s3->hs.key_share)); + goto done; + } /* * Pretend the client did not send the supported groups extension. We -- cgit v1.2.3-55-g6feb