aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKazuki Yamaguchi <k@rhe.jp>2016-04-24 04:05:40 +0900
committerKazuki Yamaguchi <k@rhe.jp>2016-05-14 20:00:59 +0900
commit1175c8f72eea9cedc5ea38982cddcdf9e3f76075 (patch)
tree3aca2137b931ca0fdb1eceb031086211031ec76a
parent2810f4bacbd10574b3e42f624aadf2c4115d89be (diff)
downloadruby-1175c8f72eea9cedc5ea38982cddcdf9e3f76075.tar.gz
test/openssl: don't test default session timeout
The default session timeout for TLSv1 is 7200 and shouldn't be 300. And this should not be checked because the value is decided by just "the 24 hours mentioned in the TLSv1 spec is way too long for http, the cache would over fill" (from OpenSSL's source comment). Old OpenSSL (<= 1.0.2) set ssl_ctx->session_timeout on SSL_CTX_new(), which we call always with SSLv23_method(), and it isn't updated with SSL_set_ssl_method().
-rw-r--r--test/openssl/test_ssl_session.rb1
1 files changed, 0 insertions, 1 deletions
diff --git a/test/openssl/test_ssl_session.rb b/test/openssl/test_ssl_session.rb
index 511129cc5e..64d94ca848 100644
--- a/test/openssl/test_ssl_session.rb
+++ b/test/openssl/test_ssl_session.rb
@@ -55,7 +55,6 @@ tddwpBAEDjcwMzA5NTYzMTU1MzAwpQMCARM=
session = ssl.session
assert(session == OpenSSL::SSL::Session.new(session.to_pem))
assert(session == OpenSSL::SSL::Session.new(ssl))
- assert_equal(300, session.timeout)
session.timeout = 5
assert_equal(5, session.timeout)
assert_not_nil(session.time)