diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2018-10-16 23:54:28 +0100 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2018-10-17 00:09:36 +0100 |
| commit | 5dcadbf4edc474a0e55a3caaa3604ed06b6a3926 (patch) | |
| tree | eb8eb74b6a0a4d6a8688b4c94460f043db907721 /test/scripts/2100-OpenSSL | |
| parent | 059f2aced50773fa38661a5a30c54260aee4bf55 (diff) | |
Testsuite: force non-TLSv1.3 for (OpenSSL) cert-variable test
This maintains visibility of the cert choice required by the auth-method configuration.
Leave the bogus results from pre-1.1.1 OpenSSL library bug while the fixed version is not in common use.
Diffstat (limited to 'test/scripts/2100-OpenSSL')
| -rw-r--r-- | test/scripts/2100-OpenSSL/2102 | 8 |
1 files changed, 6 insertions, 2 deletions
diff --git a/test/scripts/2100-OpenSSL/2102 b/test/scripts/2100-OpenSSL/2102 index 3904c5098..3465235b0 100644 --- a/test/scripts/2100-OpenSSL/2102 +++ b/test/scripts/2100-OpenSSL/2102 @@ -1,8 +1,10 @@ # TLS server: general ops and certificate extractions # -# NOTE: current OpenSSL libraries return faulty my-cert information -# when more than one is loaded, which the conf for this testcase does. +# NOTE: OpenSSL libraries return faulty my-cert information prior to OpenSSL 1.1.1 +# when more than one cert is loaded, which the conf for this testcase does. # As a result the expansion done and logged is misleading. +# While the golden log output is set to the misleading result, the testcase +# will unfortunately fail on the fixed OpenSSL versions. # # Make RSA authentication the only acceptable exim -DSERVER=server -DORDER=RSA -bd -oX PORT_D @@ -96,6 +98,8 @@ killdaemon # # make ECDSA authentication preferred # DEFAULT:+RSA should work but does not seem to +# also, will fail under TLS1.3 because there is no choice of auth +# - so we disable that in the conf exim -DSERVER=server -DORDER=ECDSA:RSA:!COMPLEMENTOFDEFAULT -bd -oX PORT_D **** client-ssl 127.0.0.1 PORT_D |