From c6852f9152b1f95be9e8c01324cd5710b4704c1c Mon Sep 17 00:00:00 2001
From: Jorge Pereira <jpereiran@gmail.com>
Date: Fri, 2 Apr 2021 10:55:18 -0300
Subject: [PATCH] Fix EAP tests against specific TLS versions

We just need the tls_disable_tlsvXX=1 due to hostapd enables all TLS
versions.
---
 src/tests/Makefile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/tests/Makefile b/src/tests/Makefile
index de948cfe0e..d26adec75f 100644
--- a/src/tests/Makefile
+++ b/src/tests/Makefile
@@ -191,6 +191,9 @@ ifneq "$(prefix)" ""
 define EAP_TLS_CONFIG
 $(BUILD_PATH)/tests/eap/${1}-${2}.conf: $(top_builddir)/src/tests/${1}.conf
 	@sed 's/phase1="/phase1="$(subst $(subst .,_,${2})=1,$(subst .,_,${2})=0,$(EAP_TLS_DISABLE_STRING)) /' < $$< > $$@
+#   Just keep the TLS versions that we want to disable. e.g: tls_disable_tlsv1_XX=1
+	@sed '/phase1=/s/tls_disable_tlsv1_[0-9]=0//g' < $$@ > $$@.tmp
+	@mv -f $$@.tmp $$@
 
 $(BUILD_PATH)/tests/eap/${1}-${2}.ok: $(BUILD_PATH)/tests/eap/${1}-${2}.conf
 	@echo EAPOL_TEST $$(notdir $$(patsubst %.ok,%,$$@))
-- 
2.47.2