zzy/openssl
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Add a test for setting TLSv1.2 ciphersuites on a QUIC object

Browse Source 
Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25886)
This commit is contained in:
Matt Caswell 2024-11-06 09:59:46 +00:00 committed by Tomas Mraz
parent 40237bf97a
commit b10cfd93fd
1 changed files with 11 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
test/quicapitest.c
View File

@ -285,7 +285,7 @@ static int test_fin_only_blocking(void)
static int test_ciphersuites(void) static int test_ciphersuites(void)
{ {
SSL_CTX *ctx = SSL_CTX_new_ex(libctx, NULL, OSSL_QUIC_client_method()); SSL_CTX *ctx = SSL_CTX_new_ex(libctx, NULL, OSSL_QUIC_client_method());
SSL *ssl; SSL *ssl = NULL;
int testresult = 0; int testresult = 0;
const STACK_OF(SSL_CIPHER) *ciphers = NULL; const STACK_OF(SSL_CIPHER) *ciphers = NULL;
const SSL_CIPHER *cipher; const SSL_CIPHER *cipher;
@ -302,10 +302,20 @@ static int test_ciphersuites(void)
if (!TEST_ptr(ctx)) if (!TEST_ptr(ctx))
return 0; return 0;
/*
* Attempting to set TLSv1.2 ciphersuites should succeed, even though they
* aren't used in QUIC.
*/
if (!TEST_true(SSL_CTX_set_cipher_list(ctx, "DEFAULT")))
goto err;
ssl = SSL_new(ctx); ssl = SSL_new(ctx);
if (!TEST_ptr(ssl)) if (!TEST_ptr(ssl))
goto err; goto err;
if (!TEST_true(SSL_set_cipher_list(ssl, "DEFAULT")))
goto err;
ciphers = SSL_get_ciphers(ssl); ciphers = SSL_get_ciphers(ssl);
for (i = 0, j = 0; i < OSSL_NELEM(cipherids); i++) { for (i = 0, j = 0; i < OSSL_NELEM(cipherids); i++) {