diff options
| author | Jeremy Harris <jgh146exb@wizmail.org> | 2023-01-07 00:17:08 +0000 |
|---|---|---|
| committer | Jeremy Harris <jgh146exb@wizmail.org> | 2023-01-07 16:00:19 +0000 |
| commit | 42f1855e94bd87f98bc6c74255be53ed6d805ba6 (patch) | |
| tree | 30a62215d6d5c52071748189ab32179b416415a6 /test/scripts | |
| parent | 31c546c4d0c3baf1b1e0ab292b4d096cffe64c34 (diff) | |
OpenSSL: tls_eccurves list support. Bug 2955
Diffstat (limited to 'test/scripts')
| -rw-r--r-- | test/scripts/2100-OpenSSL/2149 | 25 |
1 files changed, 16 insertions, 9 deletions
diff --git a/test/scripts/2100-OpenSSL/2149 b/test/scripts/2100-OpenSSL/2149 index f1af49907..18b43bd5e 100644 --- a/test/scripts/2100-OpenSSL/2149 +++ b/test/scripts/2100-OpenSSL/2149 @@ -17,16 +17,8 @@ exim -odf explicitauto@test.ex **** killdaemon # -# Explicit tls_eccurve setting of "" -# - unclear this works. At least with OpenSSL 3.0.5 we still get an x25519 keyshare in the Server Hello -exim -DSERVER=server -DDATA= -bd -oX PORT_D -**** -exim -odf explicitempty@test.ex -**** -killdaemon -# # prime256v1 -# Oddly, 3.0.5 packets show an EC-groups negotiation of C:x255519 S:secp256r1 C:secp384r1 S:secp384r1. +# Oddly, 3.0.5 packets show an EC-groups negotiation of C:x255519 S:secp256r1 C:secp256r1 S:secp256r1. # Hoever, note that RFC 8446 (TLS1.3) does NOT include prime256v1 as one of the allowable # supported groups (and it's not in the client "supported groups" extension, so what we see seems good. exim -DSERVER=server -DDATA=prime256v1 -bd -oX PORT_D @@ -50,5 +42,20 @@ exim -odf user_fail@test.ex **** killdaemon # +# Two-element list - will fail for pre- 1.1.1 OpenSSL +# - the Hello Retry Req goes out with the earliest one from the list which matches the client's Supported Groups +exim -DSERVER=server -DDATA=P-521:secp384r1 -bd -oX PORT_D +**** +exim -odf user_list2@test.ex +**** +killdaemon +# +# +# List with an "auto" element embedded, which should override. +exim -DSERVER=server '-DDATA= P-521 : P-384 : auto : P-256' -bd -oX PORT_D +**** +exim -odf user_list_auto@test.ex +**** +killdaemon # no_message_check |