Enable test-renegotiation-changed-clienthello.py but skip

"drop extended_master_secret in renegotiation" since we don't
support this extension.

diff --git a/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py b/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
index 6f3bd9d..e506c3e 100644 (file)
--- a/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
+++ b/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
@@ -1,4 +1,4 @@
-#   $OpenBSD: tlsfuzzer.py,v 1.38 2021/04/14 14:54:30 tb Exp $
+#   $OpenBSD: tlsfuzzer.py,v 1.39 2021/04/23 21:01:45 tb Exp $
 #
 # Copyright (c) 2020 Theo Buehler <tb@openbsd.org>
 #
@@ -390,6 +390,12 @@ tls12_tests = TestGroup("TLSv1.2 tests", [
         "-X", substitute_alert("illegal_parameter", "decode_error"),
     ]),
 
+    # Skip extended_master_secret test. Since we don't support this
+    # extension, we don't notice that it was dropped.
+    Test("test-renegotiation-changed-clienthello.py", [
+        "-e", "drop extended_master_secret in renegotiation",
+    ]),
+
     # Without --sig-algs-drop-ok, two tests fail since we do not currently
     # implement the signature_algorithms_cert extension (although we MUST).
     Test("test-sig-algs-renegotiation-resumption.py", ["--sig-algs-drop-ok"]),