summaryrefslogtreecommitdiffstats
path: root/test/recipes
diff options
context:
space:
mode:
authorMatt Caswell <matt@openssl.org>2018-02-26 13:26:14 +0100
committerMatt Caswell <matt@openssl.org>2018-03-14 10:51:20 +0100
commit3295d2423889496e0933b3f9af6dc692c9f9a8f2 (patch)
treee1dbd6c2cdf978d1211970f19ec295eb6ae13b0e /test/recipes
parentRemove '-Wextra' as default user flags for the Linux clang targets (diff)
downloadopenssl-3295d2423889496e0933b3f9af6dc692c9f9a8f2.tar.xz
openssl-3295d2423889496e0933b3f9af6dc692c9f9a8f2.zip
Use the TLSv1.3 record header as AAD
As of TLSv1.3 draft-25 the record header data must be used as AAD Reviewed-by: Ben Kaduk <kaduk@mit.edu> (Merged from https://github.com/openssl/openssl/pull/5604)
Diffstat (limited to 'test/recipes')
-rw-r--r--test/recipes/70-test_sslrecords.t6
1 files changed, 3 insertions, 3 deletions
diff --git a/test/recipes/70-test_sslrecords.t b/test/recipes/70-test_sslrecords.t
index 10c559e6ba..88cb0223b6 100644
--- a/test/recipes/70-test_sslrecords.t
+++ b/test/recipes/70-test_sslrecords.t
@@ -149,11 +149,11 @@ ok(TLSProxy::Message->fail(), "Changed record version in TLS1.2");
SKIP: {
skip "TLSv1.3 disabled", 6 if disabled("tls1_3");
- #Test 13: Sending a different record version in TLS1.3 should succeed
+ #Test 13: Sending a different record version in TLS1.3 should fail
$proxy->clear();
$proxy->filter(\&change_version);
$proxy->start();
- ok(TLSProxy::Message->success(), "Changed record version in TLS1.3");
+ ok(TLSProxy::Message->fail(), "Changed record version in TLS1.3");
#Test 14: Sending an unrecognised record type in TLS1.3 should fail
$proxy->clear();
@@ -464,7 +464,7 @@ sub change_version
my $proxy = shift;
# We'll change a version after the initial version neg has taken place
- if ($proxy->flight != 2) {
+ if ($proxy->flight != 1) {
return;
}