From 095f82ff0b9a7b9d6517ee1e715fc32d38965626 Mon Sep 17 00:00:00 2001 From: Ingela Anderton Andin Date: Tue, 23 Jul 2019 11:13:03 +0200 Subject: ssl: Old OpenSSL implementation does not ignore trailing client hello data Do not test TLS 1.0 with these old versions as we do send hello extensions for those implementations that will use them, and trailing unknown data should be ignored by RFC complient implementations. --- lib/ssl/test/ssl_test_lib.erl | 2 ++ 1 file changed, 2 insertions(+) diff --git a/lib/ssl/test/ssl_test_lib.erl b/lib/ssl/test/ssl_test_lib.erl index 49e7b50b1b..5d0d09b33a 100644 --- a/lib/ssl/test/ssl_test_lib.erl +++ b/lib/ssl/test/ssl_test_lib.erl @@ -2110,6 +2110,8 @@ check_sane_openssl_version(Version) -> false; {'tlsv1.1', "OpenSSL 0" ++ _} -> false; + {'tlsv1', "OpenSSL 0" ++ _} -> + false; {_, _} -> true end; -- cgit v1.2.3