[PATCH] Tests: stick ssl_sni_reneg.t with TLSv1.2

Sergey Kandaurov pluknet at nginx.com
Fri Apr 7 15:05:09 UTC 2023


# HG changeset patch
# User Sergey Kandaurov <pluknet at nginx.com>
# Date 1680879680 -14400
#      Fri Apr 07 19:01:20 2023 +0400
# Node ID f1f9fe0d4d7e2cda34cfb85721e4888f5991df49
# Parent  1197c152215b640aef0bdd3c3072f686298347b3
Tests: stick ssl_sni_reneg.t with TLSv1.2.

To make it run after enabling TLSv1.3 by default in nginx 1.23.4.

diff --git a/ssl_sni_reneg.t b/ssl_sni_reneg.t
--- a/ssl_sni_reneg.t
+++ b/ssl_sni_reneg.t
@@ -55,6 +55,7 @@ http {
 
     ssl_certificate_key localhost.key;
     ssl_certificate localhost.crt;
+    ssl_protocols TLSv1.2;
 
     server {
         listen       127.0.0.1:8080 ssl;
@@ -93,13 +94,6 @@ foreach my $name ('localhost') {
 }
 
 $t->run();
-
-{
-	my (undef, $ssl) = get_ssl_socket(8080);
-	plan(skip_all => "TLS 1.3 forbids renegotiation")
-		if Net::SSLeay::version($ssl) > 0x0303;
-}
-
 $t->plan(8);
 
 ###############################################################################


More information about the nginx-devel mailing list