summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPauli <pauli@openssl.org>2021-06-18 13:17:42 +1000
committerPauli <pauli@openssl.org>2021-06-19 15:49:46 +1000
commitd0e5230dcecc6013d351545ceb275aa2ba5baa80 (patch)
tree7b6afa6d284690b14b2689ba50a5bb13046e8cd3
parentd7b5c648d682b499b71320a03747602a6ba4dec3 (diff)
test: add test for auto DH security level meets the minimum
Reviewed-by: Tomas Mraz <tomas@openssl.org> Reviewed-by: Matt Caswell <matt@openssl.org> (Merged from https://github.com/openssl/openssl/pull/15818)
-rw-r--r--test/recipes/80-test_ssl_old.t9
1 files changed, 6 insertions, 3 deletions
diff --git a/test/recipes/80-test_ssl_old.t b/test/recipes/80-test_ssl_old.t
index 59f364d7f7..b71bc01655 100644
--- a/test/recipes/80-test_ssl_old.t
+++ b/test/recipes/80-test_ssl_old.t
@@ -520,10 +520,10 @@ sub testssl {
subtest 'RSA/(EC)DHE/PSK tests' => sub {
######################################################################
- plan tests => 5;
+ plan tests => 6;
SKIP: {
- skip "TLSv1.0 is not supported by this OpenSSL build", 5
+ skip "TLSv1.0 is not supported by this OpenSSL build", 6
if $no_tls1 || $provider eq "fips";
SKIP: {
@@ -549,7 +549,7 @@ sub testssl {
}
SKIP: {
- skip "skipping PSK tests", 2
+ skip "skipping PSK tests", 3
if ($no_psk);
ok(run(test([@ssltest, "-tls1", "-cipher", "PSK", "-psk", "abc123"])),
@@ -557,6 +557,9 @@ sub testssl {
ok(run(test([@ssltest, "-bio_pair", "-tls1", "-cipher", "PSK", "-psk", "abc123"])),
'test tls1 with PSK via BIO pair');
+
+ ok(run(test(['ssl_old_test', '-psk', '0102030405', '-cipher', '@SECLEVEL=2:DHE-PSK-AES128-CCM'])),
+ 'test auto DH meets security strength');
}
}