summaryrefslogtreecommitdiff
path: root/test/confs
diff options
context:
space:
mode:
authorJeremy Harris <jgh146exb@wizmail.org>2019-02-16 12:59:23 +0000
committerJeremy Harris <jgh146exb@wizmail.org>2019-02-16 12:59:23 +0000
commitfc243e944ec00b59b75f41d07494116f925d58b4 (patch)
treef297ea2e8ce5aa02c105c9b842d0d53523d8a62e /test/confs
parent882bc1704d33aa34873e3a0f72e657b0cc2985e5 (diff)
GnuTLS: Fix client detection of server reject of client cert under TLS1.3
Diffstat (limited to 'test/confs')
-rw-r--r--test/confs/20278
-rw-r--r--test/confs/56521
-rw-r--r--test/confs/58212
3 files changed, 7 insertions, 4 deletions
diff --git a/test/confs/2027 b/test/confs/2027
index cc47218fb..c1b93a2ce 100644
--- a/test/confs/2027
+++ b/test/confs/2027
@@ -47,9 +47,11 @@ local_delivery:
user = CALLER
send_to_server:
- driver = smtp
+ driver = smtp
allow_localhost
- hosts = ${if eq{$local_part}{userx}{127.0.0.1}{HOSTIPV4}}
- port = PORT_D
+ hosts = ${if eq{$local_part}{userx}{127.0.0.1}{HOSTIPV4}}
+ port = PORT_D
+ tls_verify_certificates = DIR/aux-fixed/cert1
+ tls_verify_cert_hostnames = :
# End
diff --git a/test/confs/5652 b/test/confs/5652
index 13c8d8617..28d3a95bb 100644
--- a/test/confs/5652
+++ b/test/confs/5652
@@ -29,6 +29,7 @@ tls_ocsp_file = DRSA/server1.example.com/server1.example.com.ocsp.good.resp \
: DECDSA/server1.example_ec.com/server1.example_ec.com.ocsp.good.resp
+tls_require_ciphers = NORMAL:!VERS-TLS1.3
# ------ ACL ------
diff --git a/test/confs/5821 b/test/confs/5821
index 86ddbdedd..8a2d6459e 100644
--- a/test/confs/5821
+++ b/test/confs/5821
@@ -23,7 +23,7 @@ tls_certificate = ${if eq {SERVER}{server} {CDIR2/fullchain.pem}fail}
tls_privatekey = ${if eq {SERVER}{server} {CDIR2/server1.example.com.unlocked.key}fail}
# Permit two specific ciphers
-tls_require_ciphers = NORMAL:-KX-ALL:+RSA:-CIPHER-ALL:+AES-128-CBC:+CAMELLIA-256-GCM
+tls_require_ciphers = NORMAL:-VERS-TLS1.3:-KX-ALL:+RSA:-CIPHER-ALL:+AES-128-CBC:+CAMELLIA-256-GCM
# ----- Routers -----
begin routers