diff --git a/tests/http/test_17_ssl_use.py b/tests/http/test_17_ssl_use.py index 7ba5b29e41..813bcffd42 100644 --- a/tests/http/test_17_ssl_use.py +++ b/tests/http/test_17_ssl_use.py @@ -176,11 +176,11 @@ class TestSSLUse: # test setting cipher suites, the AES 256 ciphers are disabled in the test server @pytest.mark.parametrize("ciphers, succeed", [ [[0x1301], True], - [[0x1302], True], + [[0x1302], False], [[0x1303], True], [[0x1302, 0x1303], True], [[0xC02B, 0xC02F], True], - [[0xC02C, 0xC030], True], + [[0xC02C, 0xC030], False], [[0xCCA9, 0xCCA8], True], [[0xC02C, 0xC030, 0xCCA9, 0xCCA8], True], ]) diff --git a/tests/http/testenv/httpd.py b/tests/http/testenv/httpd.py index c8331c8e6d..4771ea3606 100644 --- a/tests/http/testenv/httpd.py +++ b/tests/http/testenv/httpd.py @@ -257,7 +257,13 @@ class Httpd: f'Listen {self.env.proxys_port}', f'TypesConfig "{self._conf_dir}/mime.types', f'SSLSessionCache "shmcb:ssl_gcache_data(32000)"', - f'SSLHonorCipherOrder on', + (f'SSLCipherSuite SSL' + f' ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256' + f':ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305' + ), + (f'SSLCipherSuite TLSv1.3' + f' TLS_AES_128_GCM_SHA256:TLS_CHACHA20_POLY1305_SHA256' + ), ] if 'base' in self._extra_configs: conf.extend(self._extra_configs['base'])