Adjust ssl_test_new for SHA1 security level
authorMatt Caswell <matt@openssl.org>
Tue, 27 Apr 2021 14:04:11 +0000 (15:04 +0100)
committerMatt Caswell <matt@openssl.org>
Thu, 29 Apr 2021 14:52:49 +0000 (15:52 +0100)
commitd77ba503a2cf1c83098baca345327761b991d191
tree43465b1fdc06cb965a6def3c09f2514f90027d35
parent8ce390e1399a27e1c6e14756927e2331ee1cb5c5
Adjust ssl_test_new for SHA1 security level

SHA1 is now in security level 0. SHA1 is required for DTLSv1.1. Therefore
ssl_test_new needed some adjustments in the event that DTLSv1.2 is disabled.

There are also adjustments required if using the FIPS module and DTLSv1.2
is disabled. The only DTLS version supported by the FIPS module is
DTLSv1.2.

Fixes  #14956

Reviewed-by: Paul Dale <pauli@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/15047)
test/ssl-tests/16-dtls-certstatus.cnf
test/ssl-tests/16-dtls-certstatus.cnf.in
test/ssl-tests/18-dtls-renegotiate.cnf
test/ssl-tests/18-dtls-renegotiate.cnf.in
test/ssl-tests/protocol_version.pm