From 0c4d93e6991d365cc77fbaaeae367b9651f2d4cd Mon Sep 17 00:00:00 2001 From: Kazuki Yamaguchi Date: Mon, 17 Feb 2020 08:14:47 +0000 Subject: test/openssl/test_ssl: skip test_fallback_scsv if necessary Run the test case only when the OpenSSL supports both TLS 1.1 and TLS 1.2. Note that the fallback SCSV mechanism is for TLS 1.2 or older and not for 1.3. Fixes: https://github.com/ruby/openssl/issues/336 --- test/openssl/test_ssl.rb | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'test') diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb index 45a9addf53..13c3bde34d 100644 --- a/test/openssl/test_ssl.rb +++ b/test/openssl/test_ssl.rb @@ -1352,6 +1352,10 @@ end end def test_fallback_scsv + supported = check_supported_protocol_versions + return unless supported.include?(OpenSSL::SSL::TLS1_1_VERSION) && + supported.include?(OpenSSL::SSL::TLS1_2_VERSION) + pend "Fallback SCSV is not supported" unless \ OpenSSL::SSL::SSLContext.method_defined?(:enable_fallback_scsv) -- cgit v1.2.3