wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 11:40:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

tests: skip RENEGOTIATION-INFO SCSV in record_size cipher loop

Browse Source 
TLS_EMPTY_RENEGOTIATION_INFO_SCSV appears in GetCipherNames() when
HAVE_RENEGOTIATION_INDICATION is set. It is a signaling value, not a
real suite; set_cipher_list accepts it but the handshake rejects it
with UNSUPPORTED_SUITE. Add it to record_size_skip_cipher's deny list.
This commit is contained in:
Juliusz Sosinowicz
2026-05-14 14:05:42 +02:00
parent 6303af86ac
commit f3bdecf3f6
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
tests/api/test_tls.c
+4 -2
View File
@@ -1226,9 +1226,11 @@ int test_wolfSSL_alert_desc_string(void)
static int record_size_skip_cipher(const char *name)
{
/* "ECDH-" matches static-ECDH ciphers ("ECDH-RSA-*", "ECDH-ECDSA-*")
* and not ECDHE-* because of the trailing '-'. */
* and not ECDHE-* because of the trailing '-'. RENEGOTIATION-INFO is the
* TLS_EMPTY_RENEGOTIATION_INFO_SCSV signaling value, not a real cipher. */
static const char* const deny[] = {
"PSK", "SRP", "ANON", "NULL", "ECDSA", "ECDH-", "SM"
"PSK", "SRP", "ANON", "NULL", "ECDSA", "ECDH-", "SM",
"RENEGOTIATION-INFO"
};
size_t i;
for (i = 0; i < XELEM_CNT(deny); i++) {