diff options
author | Tomas Mraz <tomas@openssl.org> | 2023-06-30 18:12:00 +0200 |
---|---|---|
committer | Tomas Mraz <tomas@openssl.org> | 2023-07-03 11:20:33 +0200 |
commit | 5c3c8369f3b42ce4b816606bb9bbad00c664a416 (patch) | |
tree | 16f88921b38c6f6ca68866d6c83d08d7b47575bd | |
parent | 42926ca7f237126331a46cad159e6d31e2eafcc8 (diff) |
70-test_tls13hrr.t: Use P-521 instead of X25519 for invalid group test
Otherwise this testcase won't work with no-ecx.
Reviewed-by: Matt Caswell <matt@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/21333)
-rw-r--r-- | test/recipes/70-test_tls13hrr.t | 6 |
1 files changed, 3 insertions, 3 deletions
diff --git a/test/recipes/70-test_tls13hrr.t b/test/recipes/70-test_tls13hrr.t index 8124106b68..7941cecc99 100644 --- a/test/recipes/70-test_tls13hrr.t +++ b/test/recipes/70-test_tls13hrr.t @@ -83,15 +83,15 @@ ok($fatal_alert, "Server duplicated HRR"); # otherwise not valid (e.g. not suitable for TLSv1.3) we should reject it # and not consider it when sending the HRR. We send brainpoolP512r1 in # the ClientHello, which is acceptable to the server but is not valid in -# TLSv1.3. We expect the server to select X25519 in the HRR and the +# TLSv1.3. We expect the server to select P-521 in the HRR and the # handshake to complete successfully SKIP: { skip "EC/TLSv1.2 is disabled in this build", 1 if disabled("ec") || disabled("tls1_2"); $proxy->clear(); - $proxy->clientflags("-groups P-256:brainpoolP512r1:X25519"); - $proxy->serverflags("-groups brainpoolP512r1:X25519"); + $proxy->clientflags("-groups P-256:brainpoolP512r1:P-521"); + $proxy->serverflags("-groups brainpoolP512r1:P-521"); $testtype = INVALID_GROUP; $proxy->start(); ok(TLSProxy::Message->success(), "Invalid group with HRR"); |