diff options
| author | Emilia Kasper <emilia@openssl.org> | 2016-08-09 16:47:26 +0200 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2016-08-10 14:41:21 +0200 |
| commit | da085d273c6f2a82f3e13dc6482e0f00e0daab5b (patch) | |
| tree | 35c35a7e7b3eed72c8e7cd593d6445d2a3c7a8e0 /test/handshake_helper.c | |
| parent | b03fe23146a7ef6047226fa4927103b80e8fe155 (diff) | |
SSL tests: port CT tests, add a few more
This commit only ports existing tests, and adds some coverage for
resumption. We don't appear to have any handshake tests that cover SCT
validation success, and this commit doesn't change that.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'test/handshake_helper.c')
| -rw-r--r-- | test/handshake_helper.c | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/test/handshake_helper.c b/test/handshake_helper.c index be689dc240..9fa6019824 100644 --- a/test/handshake_helper.c +++ b/test/handshake_helper.c @@ -374,6 +374,22 @@ static void configure_handshake_ctx(SSL_CTX *server_ctx, SSL_CTX *server2_ctx, OPENSSL_assert(SSL_CTX_set_tlsext_ticket_keys(server_ctx, ticket_keys, ticket_key_len) == 1); OPENSSL_free(ticket_keys); + +#ifndef OPENSSL_NO_CT + OPENSSL_assert(SSL_CTX_set_default_ctlog_list_file(client_ctx)); + switch (extra->client.ct_validation) { + case SSL_TEST_CT_VALIDATION_PERMISSIVE: + OPENSSL_assert(SSL_CTX_enable_ct(client_ctx, + SSL_CT_VALIDATION_PERMISSIVE)); + break; + case SSL_TEST_CT_VALIDATION_STRICT: + OPENSSL_assert(SSL_CTX_enable_ct(client_ctx, + SSL_CT_VALIDATION_STRICT)); + break; + case SSL_TEST_CT_VALIDATION_NONE: + break; + } +#endif } /* Configure per-SSL callbacks and other properties. */ |