Add a test for setting TLSv1.2 ciphersuites on a QUIC object

Reviewed-by: Viktor Dukhovni <viktor@openssl.org>
Reviewed-by: Tomas Mraz <tomas@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/25886)
This commit is contained in:
Matt Caswell 2024-11-06 09:59:46 +00:00 committed by Tomas Mraz
parent 40237bf97a
commit b10cfd93fd

View File

@ -285,7 +285,7 @@ static int test_fin_only_blocking(void)
static int test_ciphersuites(void)
{
SSL_CTX *ctx = SSL_CTX_new_ex(libctx, NULL, OSSL_QUIC_client_method());
SSL *ssl;
SSL *ssl = NULL;
int testresult = 0;
const STACK_OF(SSL_CIPHER) *ciphers = NULL;
const SSL_CIPHER *cipher;
@ -302,10 +302,20 @@ static int test_ciphersuites(void)
if (!TEST_ptr(ctx))
return 0;
/*
* Attempting to set TLSv1.2 ciphersuites should succeed, even though they
* aren't used in QUIC.
*/
if (!TEST_true(SSL_CTX_set_cipher_list(ctx, "DEFAULT")))
goto err;
ssl = SSL_new(ctx);
if (!TEST_ptr(ssl))
goto err;
if (!TEST_true(SSL_set_cipher_list(ssl, "DEFAULT")))
goto err;
ciphers = SSL_get_ciphers(ssl);
for (i = 0, j = 0; i < OSSL_NELEM(cipherids); i++) {