From 8f5722a9719ce4870ce55fb88c8c78e926137453 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Thu, 30 May 2024 15:17:28 +0200 Subject: [PATCH] Fix compat.sh not running any tests on config-mini-tls1_1.h We were only requesting 3DES cipher suites (which is weirdly restrictive since the configuration also includes AES), but DES is in the default exclusion list for compat.sh, so we ended up having no acceptable cipher suites. Fix this. Signed-off-by: Gilles Peskine --- tests/scripts/test-ref-configs.pl | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/tests/scripts/test-ref-configs.pl b/tests/scripts/test-ref-configs.pl index efe716e6a7..f29afc54d8 100755 --- a/tests/scripts/test-ref-configs.pl +++ b/tests/scripts/test-ref-configs.pl @@ -27,7 +27,8 @@ my %configs = ( 'test_again_with_use_psa' => 1 }, 'config-mini-tls1_1.h' => { - 'compat' => '-m tls1_1 -f \'^DES-CBC3-SHA$\|^TLS-RSA-WITH-3DES-EDE-CBC-SHA$\'', #', + # Include DES; exclude (EC)DH; only pure-RSA key exchanges + 'compat' => '-m tls1_1 -e \'NULL\|RC4\|ARCFOUR\|ARIA\|CAMELLIA\|DH\|PSK\' -f RSA', ## Skip ssl-opt testing for now because ssl-opt.sh is missing a lot ## of requires_xxx so it would try to run tests that don't apply. # 'opt' => ' ',