diff --git a/examples/client/client.c b/examples/client/client.c index 7004b2027..2c230153f 100644 --- a/examples/client/client.c +++ b/examples/client/client.c @@ -1321,6 +1321,11 @@ THREAD_RETURN WOLFSSL_THREAD client_test(void* args) done += 1; #endif + #if defined(HAVE_QSH) + /*currently google server rejects client hello with QSH extension.*/ + done += 1; + #endif + if (done) { printf("external test can't be run in this mode"); diff --git a/src/internal.c b/src/internal.c index d7915572f..7ff4ae4e6 100755 --- a/src/internal.c +++ b/src/internal.c @@ -20597,7 +20597,7 @@ static int DoSessionTicket(WOLFSSL* ssl, const byte* input, word32* inOutIdx, case TLS_ASYNC_BEGIN: { #ifdef HAVE_QSH - if (ssl->peerQSHKeyPresent) { + if (ssl->peerQSHKeyPresent && ssl->options.haveQSH) { args->qshSz = QSH_KeyGetSize(ssl); } #endif diff --git a/tests/test-qsh.conf b/tests/test-qsh.conf index 211ecabed..96cf62778 100644 --- a/tests/test-qsh.conf +++ b/tests/test-qsh.conf @@ -28,60 +28,6 @@ -s -l QSH:PSK-CHACHA20-POLY1305 -# server TLSv1 DHE-RSA-CHACHA20-POLY1305 --v 1 --l QSH:DHE-RSA-CHACHA20-POLY1305 - -# client TLSv1 DHE-RSA-CHACHA20-POLY1305 --v 1 --l QSH:DHE-RSA-CHACHA20-POLY1305 - -# server TLSv1 ECDHE-EDCSA-CHACHA20-POLY1305 --v 1 --l QSH:ECDHE-ECDSA-CHACHA20-POLY1305 --c ./certs/server-ecc.pem --k ./certs/ecc-key.pem - -# client TLSv1 ECDHE-ECDSA-CHACHA20-POLY1305 --v 1 --l QSH:ECDHE-ECDSA-CHACHA20-POLY1305 --A ./certs/server-ecc.pem - -# server TLSv1 ECDHE-RSA-CHACHA20-POLY1305 --v 1 --l QSH:ECDHE-RSA-CHACHA20-POLY1305 - -# client TLSv1 ECDHE-RSA-CHACHA20-POLY1305 --v 1 --l QSH:ECDHE-RSA-CHACHA20-POLY1305 - -# server TLSv1.1 DHE-RSA-CHACHA20-POLY1305 --v 2 --l QSH:DHE-RSA-CHACHA20-POLY1305 - -# client TLSv1.1 DHE-RSA-CHACHA20-POLY1305 --v 2 --l QSH:DHE-RSA-CHACHA20-POLY1305 - -# server TLSv1.1 ECDHE-RSA-CHACHA20-POLY1305 --v 2 --l QSH:ECDHE-RSA-CHACHA20-POLY1305 - -# client TLSv1.1 ECDHE-RSA-CHACHA20-POLY1305 --v 2 --l QSH:ECDHE-RSA-CHACHA20-POLY1305 - -# server TLSv1.1 ECDHE-EDCSA-CHACHA20-POLY1305 --v 2 --l QSH:ECDHE-ECDSA-CHACHA20-POLY1305 --c ./certs/server-ecc.pem --k ./certs/ecc-key.pem - -# client TLSv1.1 ECDHE-ECDSA-CHACHA20-POLY1305 --v 2 --l QSH:ECDHE-ECDSA-CHACHA20-POLY1305 --A ./certs/server-ecc.pem - # server TLSv1.2 DHE-RSA-CHACHA20-POLY1305-OLD -v 3 -l QSH:DHE-RSA-CHACHA20-POLY1305-OLD