diff options
author | Benjamin Kaduk <bkaduk@akamai.com> | 2021-03-16 22:03:36 -0700 |
---|---|---|
committer | Benjamin Kaduk <bkaduk@akamai.com> | 2021-05-15 15:09:07 -0700 |
commit | 6dc56df26c41666ee5138da6c97bdb400fd03025 (patch) | |
tree | 6c40d949bd3062591798579e1844c10c2117ed38 /.github | |
parent | f89d3d698c570703b7fc0908603faf61f6f68446 (diff) |
Add extensive test coverage for SSL_get_negotiated_group()
This is nearly comprehensive, but we cannot exercise the functionality
for PSK-only TLS 1.3 resumption, since openssl talking to openssl will
always negotiate psk_dhe_ke.
Exercise both the TLS 1.3 and 1.2 cases, for initial handshakes
and resumptions, and for ECDHE and FFDHE.
Since RFC 7919 named groups (for FFDHE) are only supported for TLS 1.3,
the TLS 1.2 versions of those scenarios expect to get NID_undef since
the key exchange was not performed using a named group.
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14750)
Diffstat (limited to '.github')
0 files changed, 0 insertions, 0 deletions