diff options
| author |   jsing <jsing@openbsd.org> | 2020-07-14 18:13:22 +0000 |
|---|---|---|
| committer | jsing <jsing@openbsd.org> | 2020-07-14 18:13:22 +0000 |
| commit | 5bc6646ee1c064fa4c2b4f113bf6a40fd1bf8b30 (patch) | |
| tree | a0ba8f86b1aaaff69f500ca90b2ea7caef16b11a | |
| parent | Add a -tls1_2 option so we can force TLSv1.2 for testing. (diff) | |
| download | wireguard-openbsd-5bc6646ee1c064fa4c2b4f113bf6a40fd1bf8b30.tar.xz wireguard-openbsd-5bc6646ee1c064fa4c2b4f113bf6a40fd1bf8b30.zip | |
Force TLSv1.2 when testing SSLv3/TLSv1.2 cipher suites.
Otherwise we end up switching to TLSv1.3 and using a TLSv1.3 cipher suite.
| -rw-r--r-- | regress/lib/libssl/ssl/testssl | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/regress/lib/libssl/ssl/testssl b/regress/lib/libssl/ssl/testssl index b6f7d200a04..fe633e87975 100644 --- a/regress/lib/libssl/ssl/testssl +++ b/regress/lib/libssl/ssl/testssl @@ -58,7 +58,7 @@ for protocol in SSLv3 TLSv1.2; do for cipher in `$openssl ciphers -v "$protocol+aRSA" | awk "/ $protocol / { print \\$1 }"`; do echo "Testing $cipher" - $ssltest -cipher $cipher + $ssltest -cipher $cipher -tls1_2 if [ $? -ne 0 ] ; then echo "Failed $cipher" exit 1 |