lib/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-08-01 10:06:53 +03:00
Code Activity

ssl-opt.sh: Change MbedTLS only version negotiation tests

Browse Source 
Change description and dependencies before to
expand MbedTLS only version negotiation tests.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron
2024-03-06 15:58:50 +01:00
parent fe18d8db76
commit dcfd00c128
1 changed files with 17 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

31
tests/ssl-opt.sh
View File

@ -6873,29 +6873,30 @@ run_test "Event-driven I/O, DTLS: session-id resume, UDP packing" \
# Tests for version negotiation, MbedTLS client and server # Tests for version negotiation, MbedTLS client and server
run_test "Version check: all -> 1.2" \ requires_all_configs_enabled MBEDTLS_SSL_CLI_C MBEDTLS_SSL_SRV_C \
MBEDTLS_SSL_PROTO_TLS1_2 MBEDTLS_SSL_PROTO_TLS1_3 \
MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
run_test "Version negotiation check m->m: 1.2 (max=1.2) / 1.2+1.3 -> 1.2" \
"$P_SRV" \ "$P_SRV" \
"$P_CLI force_version=tls12" \ "$P_CLI max_version=tls12" \
0 \ 0 \
-S "mbedtls_ssl_handshake returned" \ -S "mbedtls_ssl_handshake returned" \
-C "mbedtls_ssl_handshake returned" \ -C "mbedtls_ssl_handshake returned" \
-s "Protocol is TLSv1.2" \ -s "Protocol is TLSv1.2" \
-c "Protocol is TLSv1.2" -c "Protocol is TLSv1.2"
requires_config_enabled MBEDTLS_DEBUG_C requires_all_configs_enabled MBEDTLS_SSL_CLI_C MBEDTLS_SSL_SRV_C \
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2 MBEDTLS_SSL_PROTO_TLS1_2 MBEDTLS_SSL_PROTO_TLS1_3 \
requires_config_enabled MBEDTLS_SSL_CLI_C MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 run_test "Not supported version check m->m: 1.2 (max=1.2) / 1.3 (min=1.3)" \
requires_config_enabled MBEDTLS_SSL_SRV_C "$P_SRV min_version=tls13" \
run_test "TLS 1.3 m->m: Not supported version check: cli TLS 1.2 only, srv TLS 1.3 only, fail" \ "$P_CLI max_version=tls12" \
"$P_SRV debug_level=4 max_version=tls13 min_version=tls13" \
"$P_CLI debug_level=4 max_version=tls12 min_version=tls12" \
1 \ 1 \
-c "The SSL configuration is tls12 only" \ -s "Handshake protocol not within min/max boundaries" \
-c "supported_versions(43) extension does not exist." \ -S "Protocol is TLSv1.2" \
-c "A fatal alert message was received from our peer" \ -C "Protocol is TLSv1.2" \
-s "The SSL configuration is tls13 only" \ -S "Protocol is TLSv1.3" \
-s "TLS 1.2 not supported." -C "Protocol is TLSv1.3"
# Tests of version negotiation on server side against GnuTLS client # Tests of version negotiation on server side against GnuTLS client