Mercurial > hg > nginx-tests
comparison ssl_stapling.t @ 1397:d3d2aabe16dd
Tests: LibreSSL client detection in multiple certificate tests.
SSL_CTRL_SET_SIGALGS_LIST and TLSv1.3 support are missing from LibreSSL
despite high OPENSSL_VERSION_NUMBER. Treat it as pre-1.0.2 OpenSSL client.
author | Sergey Kandaurov <pluknet@nginx.com> |
---|---|
date | Tue, 13 Nov 2018 18:29:16 +0300 |
parents | 73a9504ae6fd |
children | 94bcad5611af |
comparison
equal
deleted
inserted
replaced
1396:28ddfda3ca2a | 1397:d3d2aabe16dd |
---|---|
302 return undef; | 302 return undef; |
303 } | 303 } |
304 | 304 |
305 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!"); | 305 my $ctx = Net::SSLeay::CTX_new() or die("Failed to create SSL_CTX $!"); |
306 | 306 |
307 if (Net::SSLeay::SSLeay() < 0x1000200f) { | 307 my $ssleay = Net::SSLeay::SSLeay(); |
308 if ($ssleay < 0x1000200f || $ssleay == 0x20000000) { | |
308 Net::SSLeay::CTX_set_cipher_list($ctx, $ciphers) | 309 Net::SSLeay::CTX_set_cipher_list($ctx, $ciphers) |
309 or die("Failed to set cipher list"); | 310 or die("Failed to set cipher list"); |
310 } else { | 311 } else { |
311 # SSL_CTRL_SET_SIGALGS_LIST | 312 # SSL_CTRL_SET_SIGALGS_LIST |
312 $ciphers = 'PSS' if $ciphers eq 'RSA' && $version > 0x0303; | 313 $ciphers = 'PSS' if $ciphers eq 'RSA' && $version > 0x0303; |