diff options
| author | Ingela Anderton Andin <[email protected]> | 2018-07-05 10:37:42 +0200 |
|---|---|---|
| committer | Ingela Anderton Andin <[email protected]> | 2018-07-05 15:15:26 +0200 |
| commit | c9f236377e96640bc9a271449635ac58d80bf40f (patch) | |
| tree | 11ee4fe5154ba455bbbb0ee197024309c2a12995 /lib/ssl/test/ssl_ECC_SUITE.erl | |
| parent | f67bc13009002c23695a02e8323226bc03eca3f5 (diff) | |
| download | otp-c9f236377e96640bc9a271449635ac58d80bf40f.tar.gz otp-c9f236377e96640bc9a271449635ac58d80bf40f.tar.bz2 otp-c9f236377e96640bc9a271449635ac58d80bf40f.zip | |
ssl: No cipher suite sign restriction in TLS-1.2
Diffstat (limited to 'lib/ssl/test/ssl_ECC_SUITE.erl')
| -rw-r--r-- | lib/ssl/test/ssl_ECC_SUITE.erl | 13 |
1 files changed, 11 insertions, 2 deletions
diff --git a/lib/ssl/test/ssl_ECC_SUITE.erl b/lib/ssl/test/ssl_ECC_SUITE.erl index 3c8eda1812..9a83ae2ca6 100644 --- a/lib/ssl/test/ssl_ECC_SUITE.erl +++ b/lib/ssl/test/ssl_ECC_SUITE.erl @@ -43,10 +43,10 @@ all() -> groups() -> [ - {'tlsv1.2', [], test_cases()}, + {'tlsv1.2', [], [mix_sign | test_cases()]}, {'tlsv1.1', [], test_cases()}, {'tlsv1', [], test_cases()}, - {'dtlsv1.2', [], test_cases()}, + {'dtlsv1.2', [], [mix_sign | test_cases()]}, {'dtlsv1', [], test_cases()} ]. @@ -392,3 +392,12 @@ client_ecdhe_rsa_server_ecdhe_ecdsa_client_custom(Config) -> true -> ssl_test_lib:ecc_test(secp256r1, COpts, SOpts, ECCOpts, [], Config); false -> {skip, "unsupported named curves"} end. + +mix_sign(Config) -> + {COpts0, SOpts0} = ssl_test_lib:make_mix_cert(Config), + COpts = ssl_test_lib:ssl_options(COpts0, Config), + SOpts = ssl_test_lib:ssl_options(SOpts0, Config), + ECDHE_ECDSA = + ssl:filter_cipher_suites(ssl:cipher_suites(default, 'tlsv1.2'), + [{key_exchange, fun(ecdhe_ecdsa) -> true; (_) -> false end}]), + ssl_test_lib:basic_test(COpts, [{ciphers, ECDHE_ECDSA} | SOpts], Config). |