diff options
| author | Kazuki Yamaguchi <k@rhe.jp> | 2017-06-27 14:31:09 +0900 |
|---|---|---|
| committer | Kazuki Yamaguchi <k@rhe.jp> | 2017-06-27 14:31:09 +0900 |
| commit | 261353a42d0dc0e7bf73e5a8fb8ecffd04249d42 (patch) | |
| tree | 6bd305d087c3fed84b247ae1a3d24d9578aadba5 | |
| parent | dde512aa2d29bac496040af27c0d3487323b7552 (diff) | |
| download | ruby-openssl-261353a42d0dc0e7bf73e5a8fb8ecffd04249d42.tar.gz | |
test/test_ssl: allow 3DES cipher suites in test_sslctx_set_params
Fedora's OpenSSL seems to enable 3DES cipher suites by DEFAULT.
Fixes: https://github.com/ruby/openssl/issues/127
| -rw-r--r-- | test/test_ssl.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/test/test_ssl.rb b/test/test_ssl.rb index 19066566..b3efe95a 100644 --- a/test/test_ssl.rb +++ b/test/test_ssl.rb @@ -350,7 +350,7 @@ class OpenSSL::TestSSL < OpenSSL::SSLTestCase assert_equal OpenSSL::SSL::VERIFY_PEER, ctx.verify_mode ciphers_names = ctx.ciphers.collect{|v, _, _, _| v } assert ciphers_names.all?{|v| /A(EC)?DH/ !~ v }, "anon ciphers are disabled" - assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES)/ !~ v }, "weak ciphers are disabled" + assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES(?!-EDE|-CBC3))/ !~ v }, "weak ciphers are disabled" assert_equal 0, ctx.options & OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS if defined?(OpenSSL::SSL::OP_NO_COMPRESSION) # >= 1.0.0 assert_equal OpenSSL::SSL::OP_NO_COMPRESSION, |