diff options
| author | Emilia Kasper <emilia@openssl.org> | 2016-06-20 17:20:25 +0200 |
|---|---|---|
| committer | Emilia Kasper <emilia@openssl.org> | 2016-06-28 17:26:24 +0200 |
| commit | d2b23cd2b077de8507c49f632e20dfcdb653a35b (patch) | |
| tree | 3a8a980e199c680d7e296468439c6f53d05fa1a0 /test/ssl_test_ctx_test.conf | |
| parent | 2cdce3e32f0f70470d676352410557b626bc9d01 (diff) | |
| download | openssl-d2b23cd2b077de8507c49f632e20dfcdb653a35b.tar.gz | |
SSL test framework: port SNI tests
Observe that the old tests were partly ill-defined:
setting sn_server1 but not sn_server2 in ssltest_old.c does not enable
the SNI callback.
Fix this, and also explicitly test both flavours of SNI mismatch (ignore
/ fatal alert). Tests still pass.
Reviewed-by: Rich Salz <rsalz@openssl.org>
Diffstat (limited to 'test/ssl_test_ctx_test.conf')
| -rw-r--r-- | test/ssl_test_ctx_test.conf | 6 |
1 files changed, 5 insertions, 1 deletions
diff --git a/test/ssl_test_ctx_test.conf b/test/ssl_test_ctx_test.conf index 9c1057d23b..2fa54b58d9 100644 --- a/test/ssl_test_ctx_test.conf +++ b/test/ssl_test_ctx_test.conf @@ -6,6 +6,8 @@ ClientAlert = UnknownCA Protocol = TLSv1.1 ClientVerifyCallback = RejectAll ServerName = server2 +ExpectedServerName = server2 +ServerNameCallback = IgnoreMismatch SessionTicketExpected = Yes Method = DTLS @@ -27,9 +29,11 @@ ClientVerifyCallback = Foo [ssltest_unknown_servername] ServerName = Foo +[ssltest_unknown_servername_callback] +ServerNameCallback = Foo + [ssltest_unknown_session_ticket_expected] SessionTicketExpected = Foo [ssltest_unknown_method] Method = TLS2 - |