Add a ciphersuite config sanity check for servers
[openssl.git] / test / recipes / 70-test_sslextension.t
index 7f69f649b3d3f386e710dba3523dfd10f6c4cdb7..1c0e96eb589015c65d614fb6aa5e240e823a0140 100644 (file)
@@ -43,6 +43,15 @@ sub extension_filter
 {
     my $proxy = shift;
 
+    if ($proxy->flight == 1) {
+        # Change the ServerRandom so that the downgrade sentinel doesn't cause
+        # the connection to fail
+        my $message = ${$proxy->message_list}[1];
+        $message->random("\0"x32);
+        $message->repack();
+        return;
+    }
+
     # We're only interested in the initial ClientHello
     if ($proxy->flight != 0) {
         return;