pytests/proxy: disable TLS1.3 suppoert

diff --git a/tests/pytests/proxy/tls-proxy.c b/tests/pytests/proxy/tls-proxy.c
index fb08beb3380fe29df0c2a76ac1c63f846621d543..2e6f9ab1a5b2a608fdd3f88f91013f361166a7c3 100644 (file)
--- a/tests/pytests/proxy/tls-proxy.c
+++ b/tests/pytests/proxy/tls-proxy.c
@@ -85,6 +85,12 @@ static void on_upstream_close(uv_handle_t *handle);
 
 static int gnutls_references = 0;
 
+static const char * const priorities =
+       "NORMAL:" /* GnuTLS defaults */
+       "-VERS-TLS1.0:-VERS-TLS1.1:-VERS-TLS1.3:" /* TLS 1.2 only */
+       "-VERS-SSL3.0:-ARCFOUR-128:-COMP-ALL:+COMP-NULL";
+
+
 static struct tls_proxy_ctx *get_proxy(struct peer *peer)
 {
        return (struct tls_proxy_ctx *)peer->handle.loop->data;
@@ -387,6 +393,11 @@ static void accept_connection_from_client(uv_stream_t *server)
                fprintf(stdout, "[client] gnutls_priority_set() failed: (%d) %s\n",
                             err, gnutls_strerror_name(err));
        }
+       err = gnutls_priority_set_direct(tls->session, priorities, &errpos);
+       if (err != GNUTLS_E_SUCCESS) {
+               fprintf(stdout, "[client] setting priority '%s' failed at character %zd (...'%s') with %s (%d)\n",
+                       priorities, errpos - priorities, errpos, gnutls_strerror_name(err), err);
+       }
        err = gnutls_credentials_set(tls->session, GNUTLS_CRD_CERTIFICATE, proxy->tls_credentials);
        if (err != GNUTLS_E_SUCCESS) {
                fprintf(stdout, "[client] gnutls_credentials_set() failed: (%d) %s\n",