Skip to content

Commit 6c62846

Browse files
committed
Tests: fixed ssl_ocsp.t with LibreSSL and TLSv1.3.
LibreSSL does not support session reuse with TLSv1.3.
1 parent 40f0ae0 commit 6c62846

File tree

1 file changed

+12
-0
lines changed

1 file changed

+12
-0
lines changed

ssl_ocsp.t

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -369,9 +369,15 @@ like(get('ec-end'), qr/200 OK.*SUCCESS/s, 'ocsp ecdsa');
369369
my ($s, $ssl) = get('ec-end');
370370
my $ses = Net::SSLeay::get_session($ssl);
371371

372+
TODO: {
373+
local $TODO = 'no TLSv1.3 sessions in LibreSSL'
374+
if $t->has_module('LibreSSL') and $version > 0x303;
375+
372376
like(get('ec-end', ses => $ses),
373377
qr/200 OK.*SUCCESS:r/s, 'session reused');
374378

379+
}
380+
375381
# revoke with saved session
376382

377383
system("openssl ca -config $d/ca.conf -revoke $d/ec-end.crt "
@@ -391,9 +397,15 @@ system("openssl ocsp -index $d/certindex -CA $d/int.crt "
391397

392398
# reusing session with revoked certificate
393399

400+
TODO: {
401+
local $TODO = 'no TLSv1.3 sessions in LibreSSL'
402+
if $t->has_module('LibreSSL') and $version > 0x303;
403+
394404
like(get('ec-end', ses => $ses),
395405
qr/400 Bad.*FAILED:certificate revoked:r/s, 'session reused - revoked');
396406

407+
}
408+
397409
# regression test for self-signed
398410

399411
like(get('root', port => 8447), qr/200 OK.*SUCCESS/s, 'ocsp one');

0 commit comments

Comments
 (0)