Skip to content

Commit 7930892

Browse files
committed
tests: skip RENEGOTIATION-INFO SCSV in record_size cipher loop
TLS_EMPTY_RENEGOTIATION_INFO_SCSV appears in GetCipherNames() when HAVE_RENEGOTIATION_INDICATION is set. It is a signaling value, not a real suite; set_cipher_list accepts it but the handshake rejects it with UNSUPPORTED_SUITE. Add it to record_size_skip_cipher's deny list.
1 parent 508ea15 commit 7930892

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

tests/api/test_tls.c

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1128,9 +1128,11 @@ int test_tls12_peerauth_failsafe(void)
11281128
static int record_size_skip_cipher(const char *name)
11291129
{
11301130
/* "ECDH-" matches static-ECDH ciphers ("ECDH-RSA-*", "ECDH-ECDSA-*")
1131-
* and not ECDHE-* because of the trailing '-'. */
1131+
* and not ECDHE-* because of the trailing '-'. RENEGOTIATION-INFO is the
1132+
* TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling value, not a real cipher. */
11321133
static const char* const deny[] = {
1133-
"PSK", "SRP", "ANON", "NULL", "ECDSA", "ECDH-", "SM"
1134+
"PSK", "SRP", "ANON", "NULL", "ECDSA", "ECDH-", "SM",
1135+
"RENEGOTIATION-INFO"
11341136
};
11351137
size_t i;
11361138
for (i = 0; i < XELEM_CNT(deny); i++) {

0 commit comments

Comments
 (0)