diff options
author | Pauli <pauli@openssl.org> | 2021-06-18 13:17:42 +1000 |
---|---|---|
committer | Pauli <pauli@openssl.org> | 2021-06-19 15:49:46 +1000 |
commit | d0e5230dcecc6013d351545ceb275aa2ba5baa80 (patch) | |
tree | 7b6afa6d284690b14b2689ba50a5bb13046e8cd3 | |
parent | d7b5c648d682b499b71320a03747602a6ba4dec3 (diff) |
test: add test for auto DH security level meets the minimum
Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15818)
-rw-r--r-- | test/recipes/80-test_ssl_old.t | 9 |
1 files changed, 6 insertions, 3 deletions
diff --git a/test/recipes/80-test_ssl_old.t b/test/recipes/80-test_ssl_old.t index 59f364d7f7..b71bc01655 100644 --- a/test/recipes/80-test_ssl_old.t +++ b/test/recipes/80-test_ssl_old.t @@ -520,10 +520,10 @@ sub testssl { subtest 'RSA/(EC)DHE/PSK tests' => sub { ###################################################################### - plan tests => 5; + plan tests => 6; SKIP: { - skip "TLSv1.0 is not supported by this OpenSSL build", 5 + skip "TLSv1.0 is not supported by this OpenSSL build", 6 if $no_tls1 || $provider eq "fips"; SKIP: { @@ -549,7 +549,7 @@ sub testssl { } SKIP: { - skip "skipping PSK tests", 2 + skip "skipping PSK tests", 3 if ($no_psk); ok(run(test([@ssltest, "-tls1", "-cipher", "PSK", "-psk", "abc123"])), @@ -557,6 +557,9 @@ sub testssl { ok(run(test([@ssltest, "-bio_pair", "-tls1", "-cipher", "PSK", "-psk", "abc123"])), 'test tls1 with PSK via BIO pair'); + + ok(run(test(['ssl_old_test', '-psk', '0102030405', '-cipher', '@SECLEVEL=2:DHE-PSK-AES128-CCM'])), + 'test auto DH meets security strength'); } } |