yuzu-emu/mbedtls
2
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
mbedtls/tests
History
Gilles Peskine 96f5baecec Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman 
Our interoperability tests fail with a recent OpenSSL server. The
reason is that they force 1024-bit Diffie-Hellman parameters, which
recent OpenSSL (e.g. 1.1.1f on Ubuntu 20.04) reject:
```
140072814650688:error:1408518A:SSL routines:ssl3_ctx_ctrl:dh key too small:../ssl/s3_lib.c:3782:
```

We've been passing custom DH parameters since
6195767554 because OpenSSL <=1.0.2a
requires it. This is only concerns the version we use as
OPENSSL_LEGACY. So only use custom DH parameters for that version. In
compat.sh, use it based on the observed version of $OPENSSL_CMD.

This way, ssl-opt.sh and compat.sh work (barring other issues) for all
our reference versions of OpenSSL as well as for a modern system OpenSSL.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2021-04-27 11:54:53 +02:00
..
.jenkins
configs
data_files Merge pull request #3698 from darrenkrahn/development 2021-01-17 18:06:18 +00:00
docker/bionic
git-scripts
include/test Merge pull request #4407 from ARMmbed/dev3_signoffs 2021-04-26 19:48:16 +01:00
scripts Merge pull request #4407 from ARMmbed/dev3_signoffs 2021-04-26 19:48:16 +01:00
src Merge pull request #4407 from ARMmbed/dev3_signoffs 2021-04-26 19:48:16 +01:00
suites Merge pull request #4407 from ARMmbed/dev3_signoffs 2021-04-26 19:48:16 +01:00
.gitignore
CMakeLists.txt Remove PKCS#11 library wrapper. 2021-04-21 11:05:00 +02:00
compat-in-docker.sh
compat.sh Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman 2021-04-27 11:54:53 +02:00
context-info.sh
Descriptions.txt
make-in-docker.sh
Makefile Remove PKCS#11 library wrapper. 2021-04-21 11:05:00 +02:00
ssl-opt-in-docker.sh
ssl-opt.sh Fix SSL tests scripts with recent OpenSSL server with Diffie-Hellman 2021-04-27 11:54:53 +02:00