diff options
author | Matt Caswell <matt@openssl.org> | 2018-07-30 10:13:14 +0200 |
---|---|---|
committer | Matt Caswell <matt@openssl.org> | 2018-07-31 10:31:50 +0200 |
commit | 43a0f2733a943799060ea275516fcce00d89eb38 (patch) | |
tree | f306c49491086a35ac38767945b1a026006191ce /test/ssl_test_ctx.c | |
parent | Deprecate the EC curve type specific functions in 1.2.0 (diff) | |
download | openssl-43a0f2733a943799060ea275516fcce00d89eb38.tar.xz openssl-43a0f2733a943799060ea275516fcce00d89eb38.zip |
Fix some TLSv1.3 alert issues
Ensure that the certificate required alert actually gets sent (and doesn't
get translated into handshake failure in TLSv1.3).
Ensure that proper reason codes are given for the new TLSv1.3 alerts.
Remove an out of date macro for TLS13_AD_END_OF_EARLY_DATA. This is a left
over from an earlier TLSv1.3 draft that is no longer used.
Fixes #6804
Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/6809)
Diffstat (limited to 'test/ssl_test_ctx.c')
-rw-r--r-- | test/ssl_test_ctx.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/test/ssl_test_ctx.c b/test/ssl_test_ctx.c index 5b427e53e7..cb4b8606e2 100644 --- a/test/ssl_test_ctx.c +++ b/test/ssl_test_ctx.c @@ -126,6 +126,7 @@ static const test_enum ssl_alerts[] = { {"UnrecognizedName", SSL_AD_UNRECOGNIZED_NAME}, {"BadCertificate", SSL_AD_BAD_CERTIFICATE}, {"NoApplicationProtocol", SSL_AD_NO_APPLICATION_PROTOCOL}, + {"CertificateRequired", SSL_AD_CERTIFICATE_REQUIRED}, }; __owur static int parse_alert(int *alert, const char *value) |