]> git.ipfire.org Git - thirdparty/openssl.git/commitdiff
Runchecker: fix TLS curves test failure with no-tls1_3 option
authorPauli <pauli@openssl.org>
Thu, 22 Apr 2021 06:13:10 +0000 (16:13 +1000)
committerTomas Mraz <tomas@openssl.org>
Fri, 23 Apr 2021 09:13:30 +0000 (11:13 +0200)
The TLS curves test strong assumes that TLS 1.2 and TLS 1.3 are present.
It is only conditioned out if TLS 1.2 isn't.  This changes also conditions
it out if TLS 1.3 isn't present.

Fixes ##14965

Reviewed-by: Ben Kaduk <kaduk@mit.edu>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14978)

test/recipes/80-test_ssl_new.t

index 4dc2529593832b6ad44c9fbf52d3d7dcf66d6690..a1828094db313859ed6be0d29dacec2c008cde14 100644 (file)
@@ -98,7 +98,8 @@ my %skip = (
   # special-casing for.
   # TODO(TLS 1.3): We should review this once we have TLS 1.3.
   "13-fragmentation.cnf" => disabled("tls1_2"),
-  "14-curves.cnf" => disabled("tls1_2") || $no_ec || $no_ec2m,
+  "14-curves.cnf" => disabled("tls1_2") || disabled("tls1_3")
+                     || $no_ec || $no_ec2m,
   "15-certstatus.cnf" => $no_tls || $no_ocsp,
   "16-dtls-certstatus.cnf" => $no_dtls || $no_ocsp,
   "17-renegotiate.cnf" => $no_tls_below1_3,