mirror of
https://github.com/openssl/openssl.git
synced 2024-12-09 05:51:54 +08:00
Fix a no-ecx failure in test_tls13hrr
In the case of no-ecx test 3 in test_tls13hrr was failing because it was setting the server side support groups to on P-256 in order to induce an HRR. However with no-ecx the client insteads issues an initial key share using P-256 anyway and so an HRR is not used. We swap to use P-384 instead. Reviewed-by: Hugo Landau <hlandau@openssl.org> Reviewed-by: Tom Cosgrove <tom.cosgrove@arm.com> (Merged from https://github.com/openssl/openssl/pull/21372)
This commit is contained in:
parent
f9fcc7c727
commit
c3832d79db
@ -73,7 +73,7 @@ $proxy->clear();
|
||||
if (disabled("ec")) {
|
||||
$proxy->serverflags("-curves ffdhe3072");
|
||||
} else {
|
||||
$proxy->serverflags("-curves P-256");
|
||||
$proxy->serverflags("-curves P-384");
|
||||
}
|
||||
$testtype = DUPLICATE_HRR;
|
||||
$proxy->start();
|
||||
|
Loading…
Reference in New Issue
Block a user