From c3832d79db0c8dc08935d86200d427f945deb92e Mon Sep 17 00:00:00 2001 From: Matt Caswell Date: Thu, 6 Jul 2023 10:05:50 +0100 Subject: [PATCH] Fix a no-ecx failure in test_tls13hrr In the case of no-ecx test 3 in test_tls13hrr was failing because it was setting the server side support groups to on P-256 in order to induce an HRR. However with no-ecx the client insteads issues an initial key share using P-256 anyway and so an HRR is not used. We swap to use P-384 instead. Reviewed-by: Hugo Landau Reviewed-by: Tom Cosgrove (Merged from https://github.com/openssl/openssl/pull/21372) --- test/recipes/70-test_tls13hrr.t | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/test/recipes/70-test_tls13hrr.t b/test/recipes/70-test_tls13hrr.t index 7941cecc99c..ece9f033ded 100644 --- a/test/recipes/70-test_tls13hrr.t +++ b/test/recipes/70-test_tls13hrr.t @@ -73,7 +73,7 @@ $proxy->clear(); if (disabled("ec")) { $proxy->serverflags("-curves ffdhe3072"); } else { - $proxy->serverflags("-curves P-256"); + $proxy->serverflags("-curves P-384"); } $testtype = DUPLICATE_HRR; $proxy->start(); -- 2.47.2