From da5af22015deb8dff73b56e35caf762131a38007 Mon Sep 17 00:00:00 2001
From: Jerry Yu <jerry.h.yu@arm.com>
Date: Fri, 24 Dec 2021 18:45:45 +0800
Subject: [PATCH] tls13_only: add tls13_only test component

Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
---
 tests/configs/tls13-only.h | 58 ++++++++++++++++++++++++++++++++++++++
 tests/scripts/all.sh       |  8 ++++++
 2 files changed, 66 insertions(+)
 create mode 100644 tests/configs/tls13-only.h

diff --git a/tests/configs/tls13-only.h b/tests/configs/tls13-only.h
new file mode 100644
index 0000000000..fa043b7b13
--- /dev/null
+++ b/tests/configs/tls13-only.h
@@ -0,0 +1,58 @@
+/* MBEDTLS_USER_CONFIG_FILE for testing.
+ * Only used for a few test configurations.
+ *
+ * Typical usage (note multiple levels of quoting):
+ *     make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
+ */
+
+/*
+ *  Copyright The Mbed TLS Contributors
+ *  SPDX-License-Identifier: Apache-2.0
+ *
+ *  Licensed under the Apache License, Version 2.0 (the "License"); you may
+ *  not use this file except in compliance with the License.
+ *  You may obtain a copy of the License at
+ *
+ *  http://www.apache.org/licenses/LICENSE-2.0
+ *
+ *  Unless required by applicable law or agreed to in writing, software
+ *  distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+ *  WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ *  See the License for the specific language governing permissions and
+ *  limitations under the License.
+ */
+#if defined(MBEDTLS_SSL_ENCRYPT_THEN_MAC)
+#undef MBEDTLS_SSL_ENCRYPT_THEN_MAC
+#endif
+
+#if defined(MBEDTLS_SSL_EXTENDED_MASTER_SECRET)
+#undef MBEDTLS_SSL_EXTENDED_MASTER_SECRET
+#endif
+
+#if defined(MBEDTLS_SSL_PROTO_TLS1_2)
+#undef MBEDTLS_SSL_PROTO_TLS1_2
+#endif
+
+#if !defined(MBEDTLS_SSL_PROTO_TLS1_3)
+#define MBEDTLS_SSL_PROTO_TLS1_3
+#endif
+
+#if !defined(MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE)
+#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
+#endif
+
+#if defined(MBEDTLS_SSL_PROTO_DTLS)
+#undef MBEDTLS_SSL_PROTO_DTLS
+#endif
+
+#if defined(MBEDTLS_SSL_DTLS_ANTI_REPLAY)
+#undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
+#endif
+
+#if defined(MBEDTLS_SSL_DTLS_HELLO_VERIFY)
+#undef MBEDTLS_SSL_DTLS_HELLO_VERIFY
+#endif
+
+#if defined(MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE)
+#undef MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
+#endif
diff --git a/tests/scripts/all.sh b/tests/scripts/all.sh
index bd38cdb149..e387cbfb7b 100755
--- a/tests/scripts/all.sh
+++ b/tests/scripts/all.sh
@@ -2705,6 +2705,14 @@ component_build_armcc () {
     armc6_build_test "--target=aarch64-arm-none-eabi -march=armv8.2-a"
 }
 
+component_test_tls13_only_build () {
+    msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 only, without MBEDTLS_SSL_PROTO_TLS1_2"
+    make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
+
+    msg "ssl-opt.sh (TLS 1.3)"
+    if_build_succeeded tests/ssl-opt.sh
+}
+
 component_test_tls13 () {
     msg "build: default config with MBEDTLS_SSL_PROTO_TLS1_3 enabled, without padding"
     scripts/config.py set MBEDTLS_SSL_PROTO_TLS1_3