Extend SSL_get_negotiated_group() tests for TLS 1.2
authorBenjamin Kaduk <bkaduk@akamai.com>
Tue, 16 Mar 2021 23:10:04 +0000 (16:10 -0700)
committerBenjamin Kaduk <bkaduk@akamai.com>
Sat, 15 May 2021 22:09:07 +0000 (15:09 -0700)
commit75d4852090bb898b39be8e7ae2874720bd0a9c5c
treee1e5a4a875bcc818ec8a0ec37e85ea7ffaae072d
parentc22ad9b64a9f2cca64400836caee7279a9de8cc1
Extend SSL_get_negotiated_group() tests for TLS 1.2

We don't implement RFC 7919 named groups for TLS 1.2, so we can
only test the ECDHE case for non-TLS-1.3.

Interestingly, though the test_key_exchange() routine claimed to
be exercising ffdhe2048 with TLS 1.2, the configured ciphers were
incompatible with DHE key exchange, so we ended up just using RSA
key transport and not doing an ephemeral key exchange at all.
Reconfigure the tests to actually exercise ephemeral key exchange
for both the EC and FF cases (even though we don't use the named
group information for the finite-field case).

Reviewed-by: Matt Caswell <matt@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/14750)
test/sslapitest.c