Mercurial > hg > nginx-tests

comparison ssl_stapling.t @ 1397:d3d2aabe16dd

Find changesets by keywords (author, files, the commit message), revision number or hash, or revset expression.
Tests: LibreSSL client detection in multiple certificate tests. SSL_CTRL_SET_SIGALGS_LIST and TLSv1.3 support are missing from LibreSSL despite high OPENSSL_VERSION_NUMBER. Treat it as pre-1.0.2 OpenSSL client.
author Sergey Kandaurov <pluknet@nginx.com>
date Tue, 13 Nov 2018 18:29:16 +0300
parents 73a9504ae6fd
children 94bcad5611af
comparison
equal deleted inserted replaced
1396:28ddfda3ca2a 1397:d3d2aabe16dd
302 return undef; 302 return undef;
303 } 303 }
304 304
305 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!"); 305 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!");
306 306
307 if (Net::SSLeay::SSLeay() < 0x1000200f) { 307 my $ssleay = Net::SSLeay::SSLeay();
308 if ($ssleay < 0x1000200f || $ssleay == 0x20000000) {
308 Net::SSLeay::CTX_set_cipher_list($ctx, $ciphers) 309 Net::SSLeay::CTX_set_cipher_list($ctx, $ciphers)
309 or die("Failed to set cipher list"); 310 or die("Failed to set cipher list");
310 } else { 311 } else {
311 # SSL_CTRL_SET_SIGALGS_LIST 312 # SSL_CTRL_SET_SIGALGS_LIST
312 $ciphers = 'PSS' if $ciphers eq 'RSA' && $version > 0x0303; 313 $ciphers = 'PSS' if $ciphers eq 'RSA' && $version > 0x0303;