]> git.ipfire.org Git - thirdparty/haproxy.git/commitdiff
REGTESTS: quic/issuers_chain_path: do not forget to enable QUIC compat mode
authorWilly Tarreau <w@1wt.eu>
Mon, 18 May 2026 15:46:10 +0000 (17:46 +0200)
committerWilly Tarreau <w@1wt.eu>
Mon, 18 May 2026 16:01:53 +0000 (18:01 +0200)
This test is compatible with QUIC_OPENSSL_COMPAT but the "limited-quic"
directive was not set, making it fail on older libs with no QUIC support
despite being declared as compatible.

reg-tests/quic/tls13_ssl_crt-list_filters.vtc
reg-tests/ssl/issuers_chain_path.vtci

index 0eb0d14cd4fac050403f559a40bd09e476d8689d..443d9b600f15a5b4341913cc33a2b5c55a11768b 100644 (file)
@@ -6,6 +6,7 @@ feature cmd "$HAPROXY_PROGRAM -cc 'feature(QUIC) && !feature(QUIC_OPENSSL_COMPAT
 # Note that USE_OPENSSL is always set if USE_QUIC is set
 # Same conditions as for ssl/tls13_ssl_crt-list_filters.vtc about TLS library versions
 feature cmd "$HAPROXY_PROGRAM -cc 'ssllib_name_startswith(OpenSSL) && openssl_version_atleast(1.1.1) || feature(OPENSSL_AWSLC)'"
+
 # This test checks if the multiple certificate types works correctly with the
 # SNI, and that the negative filters are correctly excluded
 #
index 0daf7c3c56edca3a50bf472462f1358d458037d4..8c740698b4c78c5df02050766965ab95d7e85904 100644 (file)
@@ -6,6 +6,10 @@ haproxy h1 -conf {
         thread-groups 1
     .endif
 
+    .if feature(QUIC_OPENSSL_COMPAT)
+        limited-quic
+    .endif
+
         stats socket "${tmpdir}/h1/stats" level admin
         issuers-chain-path "${testdir}/certs/issuers-chain-path/ca/"
         crt-base "${testdir}/certs/issuers-chain-path"