]> git.ipfire.org Git - thirdparty/hostap.git/commitdiff
tests: Fix EAP-FAST protocol testing with newer OpenSSL and pyOpenSSL
authorJouni Malinen <j@w1.fi>
Mon, 27 May 2019 21:01:01 +0000 (00:01 +0300)
committerJouni Malinen <j@w1.fi>
Mon, 27 May 2019 21:01:01 +0000 (00:01 +0300)
Need to drop OpenSSL security level to 0 for ADH-AES128-SHA to work with
the latest library version.

Signed-off-by: Jouni Malinen <j@w1.fi>
tests/hwsim/test_eap_proto.py

index 20f6e3fdeec406eb646937678a5d9abc89d94077..db30594eb3903eaa6b4e839b2ce22e1f3071a036 100644 (file)
@@ -10110,7 +10110,7 @@ def run_eap_fast_phase2(dev, test_payload, test_failure=True):
         ctx['sslctx'] = OpenSSL.SSL.Context(OpenSSL.SSL.TLSv1_METHOD)
         ctx['sslctx'].set_info_callback(ssl_info_callback)
         ctx['sslctx'].load_tmp_dh("auth_serv/dh.conf")
-        ctx['sslctx'].set_cipher_list("ADH-AES128-SHA")
+        ctx['sslctx'].set_cipher_list("ADH-AES128-SHA:@SECLEVEL=0")
         ctx['conn'] = OpenSSL.SSL.Connection(ctx['sslctx'], None)
         ctx['conn'].set_accept_state()
         log_conn_state(ctx['conn'])