Mercurial > hg > nginx-tests
diff ssl_verify_client.t @ 1843:818e6d8c43b5
Tests: LibreSSL does not send CA lists with TLSv1.3.
author | Maxim Dounin <mdounin@mdounin.ru> |
---|---|
date | Thu, 23 Mar 2023 19:50:19 +0300 |
parents | dc89eb420196 |
children | 0e1865aa9b33 |
line wrap: on
line diff
--- a/ssl_verify_client.t +++ b/ssl_verify_client.t @@ -55,6 +55,7 @@ http { %%TEST_GLOBALS_HTTP%% add_header X-Verify x$ssl_client_verify:${ssl_client_cert}x; + add_header X-Protocol $ssl_protocol; ssl_session_cache shared:SSL:1m; ssl_session_tickets off; @@ -169,15 +170,24 @@ like(get('optional', '3.example.com'), q SKIP: { skip 'Net::SSLeay version >= 1.36 required', 1 if $Net::SSLeay::VERSION < 1.36; +TODO: { +local $TODO = 'broken TLSv1.3 CA list in LibreSSL' + if $t->has_module('LibreSSL') && test_tls13(); + my $ca = join ' ', get('optional', '3.example.com'); is($ca, '/CN=2.example.com', 'no trusted sent'); } +} like(get('optional', undef, 'localhost'), qr/421 Misdirected/, 'misdirected'); ############################################################################### +sub test_tls13 { + get('optional') =~ /TLSv1.3/; +} + sub get { my ($sni, $cert, $host) = @_;