From: Dr. Stephen Henson Date: Sun, 19 Feb 2017 18:55:26 +0000 (+0000) Subject: Add no siglags test for ECDSA certificate X-Git-Tag: OpenSSL_1_1_1-pre1~2327 X-Git-Url: https://git.openssl.org/?p=openssl.git;a=commitdiff_plain;h=faadddc906b9f3ee2059a1a20d43d8f42e143939 Add no siglags test for ECDSA certificate Reviewed-by: Rich Salz (Merged from https://github.com/openssl/openssl/pull/2679) --- diff --git a/test/recipes/70-test_sslsigalgs.t b/test/recipes/70-test_sslsigalgs.t index e5434187a3..05887974d3 100755 --- a/test/recipes/70-test_sslsigalgs.t +++ b/test/recipes/70-test_sslsigalgs.t @@ -48,7 +48,7 @@ use constant { #Test 1: Default sig algs should succeed $proxy->start() or plan skip_all => "Unable to start up Proxy for tests"; -plan tests => 15; +plan tests => 16; ok(TLSProxy::Message->success, "Default sigalgs"); my $testtype; @@ -183,6 +183,18 @@ SKIP: { $proxy->start(); ok(TLSProxy::Message->fail, "No matching TLSv1.2 sigalgs"); $proxy->filter(\&sigalgs_filter); + + #Test 16: No sig algs extension, ECDSA cert, TLSv1.2 should succeed + $proxy->clear(); + $testtype = NO_SIG_ALGS_EXT; + $proxy->clientflags("-no_tls1_3"); + $proxy->serverflags("-cert " . srctop_file("test", "certs", + "server-ecdsa-cert.pem") . + " -key " . srctop_file("test", "certs", + "server-ecdsa-key.pem")), + $proxy->ciphers("ECDHE-ECDSA-AES128-SHA:TLS13-AES-128-GCM-SHA256"); + $proxy->start(); + ok(TLSProxy::Message->success, "No TLSv1.2 sigalgs, ECDSA"); }