From: tb <tb@openbsd.org>
Date: Fri, 23 Apr 2021 21:01:45 +0000 (+0000)
Subject: Enable test-renegotiation-changed-clienthello.py but skip
X-Git-Url: http://artulab.com/gitweb/?a=commitdiff_plain;h=a0f9d20cccf74f22dcf68b9f410c01e4f1c31177;p=openbsd

Enable test-renegotiation-changed-clienthello.py but skip
"drop extended_master_secret in renegotiation" since we don't
support this extension.
---

diff --git a/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py b/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
index 6f3bd9d8bfd..e506c3ebce1 100644
--- a/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
+++ b/regress/lib/libssl/tlsfuzzer/tlsfuzzer.py
@@ -1,4 +1,4 @@
-#   $OpenBSD: tlsfuzzer.py,v 1.38 2021/04/14 14:54:30 tb Exp $
+#   $OpenBSD: tlsfuzzer.py,v 1.39 2021/04/23 21:01:45 tb Exp $
 #
 # Copyright (c) 2020 Theo Buehler <tb@openbsd.org>
 #
@@ -390,6 +390,12 @@ tls12_tests = TestGroup("TLSv1.2 tests", [
         "-X", substitute_alert("illegal_parameter", "decode_error"),
     ]),
 
+    # Skip extended_master_secret test. Since we don't support this
+    # extension, we don't notice that it was dropped.
+    Test("test-renegotiation-changed-clienthello.py", [
+        "-e", "drop extended_master_secret in renegotiation",
+    ]),
+
     # Without --sig-algs-drop-ok, two tests fail since we do not currently
     # implement the signature_algorithms_cert extension (although we MUST).
     Test("test-sig-algs-renegotiation-resumption.py", ["--sig-algs-drop-ok"]),