From: Neil Horman Date: Thu, 23 Jan 2025 18:55:13 +0000 (-0500) Subject: Disable server address validation for resumption test X-Git-Tag: openssl-3.5.0-alpha1~250 X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=10cd7986882fd1b220d88e9dedf59ae8737c755e;p=thirdparty%2Fopenssl.git Disable server address validation for resumption test The quic-interop runner expects a handshake message and certificate exchange in the first 3 frames in this test. The addition of server address validation retry frames causes the test to fail. Strictly speaking this is a shortcoming of the test, but disabling address validation allows the test to pass, and we have the mechanism, so disable the feature. Fixes openssl/project#1061 Reviewed-by: Matt Caswell Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/26545) --- diff --git a/test/quic-openssl-docker/run_endpoint.sh b/test/quic-openssl-docker/run_endpoint.sh index 6e5252642cb..89c76814828 100644 --- a/test/quic-openssl-docker/run_endpoint.sh +++ b/test/quic-openssl-docker/run_endpoint.sh @@ -91,8 +91,11 @@ elif [ "$ROLE" == "server" ]; then "handshake"|"transfer"|"ipv6") NO_ADDR_VALIDATE=yes SSLKEYLOGFILE=/logs/keys.log FILEPREFIX=/www quic-hq-interop-server 443 /certs/cert.pem /certs/priv.key ;; - "retry"|"resumption") - SSLKEYLOGFILE=/logs/keys.log FILEPREFIX=/www quic-hq-interop-server 443 /certs/cert.pem /certs/priv.key + "retry") + SSLKEYLOGFILE=/logs/keys.log FILEPREFIX=/www quic-hq-interop-server 443 /certs/cert.pem /certs/priv.key + ;; + "resumption") + NO_ADDR_VALIDATE=yes SSLKEYLOGFILE=/logs/keys.log FILEPREFIX=/www quic-hq-interop-server 443 /certs/cert.pem /certs/priv.key ;; "http3") FILEPREFIX=/www/ SSLKEYLOGFILE=/logs/keys.log ossl-nghttp3-demo-server 443 /certs/cert.pem /certs/priv.key