Fix a no-ecx failure in test_tls13hrr

In the case of no-ecx test 3 in test_tls13hrr was failing because it was
setting the server side support groups to on P-256 in order to induce an
HRR. However with no-ecx the client insteads issues an initial key share
using P-256 anyway and so an HRR is not used. We swap to use P-384 instead.

Reviewed-by: Hugo Landau <hlandau@openssl.org>
Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com>
(Merged from https://github.com/openssl/openssl/pull/21372)
This commit is contained in:
Matt Caswell 2023-07-06 10:05:50 +01:00
parent f9fcc7c727
commit c3832d79db

View File

@ -73,7 +73,7 @@ $proxy->clear();
if (disabled("ec")) {
$proxy->serverflags("-curves ffdhe3072");
} else {
$proxy->serverflags("-curves P-256");
$proxy->serverflags("-curves P-384");
}
$testtype = DUPLICATE_HRR;
$proxy->start();