From: Neil Horman <nhorman@openssl.org>
Date: Thu, 6 Nov 2025 14:38:17 +0000 (-0500)
Subject: Add test for recordpadding
X-Git-Tag: 3.6-PRE-CLANG-FORMAT-WEBKIT~37
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fcdee8e49288b29af789bbbacb576ddffa8819c2;p=thirdparty%2Fopenssl.git

Add test for recordpadding

Just run the quicapitest (which attempts to create quic connections)
while using a config that specifies recordpadding, which quic should
ignore

Reviewed-by: Tomas Mraz <tomas@openssl.org>
Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/29193)
---

diff --git a/test/default-recordpadding.cnf b/test/default-recordpadding.cnf
new file mode 100644
index 00000000000..a948e4359b5
--- /dev/null
+++ b/test/default-recordpadding.cnf
@@ -0,0 +1,27 @@
+openssl_conf = openssl_init
+
+# Comment out the next line to ignore configuration errors
+config_diagnostics = 1
+
+[openssl_init]
+providers = provider_sect
+ssl_conf = ssl_section
+
+[ssl_section]
+system_default = system_default_section
+
+# Set block and record padding
+# Note: QUIC objects should ignore this, as they
+# always pad during datagram encryption
+[system_default_section]
+RecordPadding = 128,256
+
+[provider_sect]
+default = default_sect
+legacy  = legacy_sect
+
+[default_sect]
+activate = true
+
+[legacy_sect]
+activate = false
diff --git a/test/recipes/75-test_quicapi.t b/test/recipes/75-test_quicapi.t
index e1ce5eabb29..7056ad17b0f 100644
--- a/test/recipes/75-test_quicapi.t
+++ b/test/recipes/75-test_quicapi.t
@@ -30,7 +30,7 @@ plan tests =>
     + 1;                        # quicapitest with default provider
 
 ok(run(test(["quicapitest", "default",
-             srctop_file("test", "default.cnf"),
+             srctop_file("test", "default-recordpadding.cnf"),
              srctop_dir("test", "certs"),
              srctop_dir("test", "recipes", "75-test_quicapi_data")])),
              "running quicapitest");