diff options
| author | David Benjamin <davidben@chromium.org> | 2014-12-01 09:27:42 +0300 |
|---|---|---|
| committer | Adam Langley <agl@google.com> | 2014-12-02 22:42:39 +0300 |
| commit | 128dbc30f65f8572f3907614106199185cd6e3b2 (patch) | |
| tree | 95c80f7bf87a95b5cb56e101a1dd124789600cd0 /ssl/test | |
| parent | beb47022b08b12cf2d7b2f7fb96484814ed4a9ef (diff) | |
Factor out the client max-version logic into a helper function.
Replace the comment with a clearer one and reimplement it much more tidily. The
mask thing was more complicated than was needed.
This slightly changes behavior on the DTLS_ANY_VERSION side in that, if only
one method is enabled, we no longer short-circuit to the version-locked method
early. This "optimization" seems unnecessary.
Change-Id: I571c8b60ed16bd4357c67d65df0dd1ef9cc5eb57
Reviewed-on: https://boringssl-review.googlesource.com/2451
Reviewed-by: Adam Langley <agl@google.com>
Diffstat (limited to 'ssl/test')
| -rw-r--r-- | ssl/test/runner/runner.go | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/ssl/test/runner/runner.go b/ssl/test/runner/runner.go index 73563882..421940d3 100644 --- a/ssl/test/runner/runner.go +++ b/ssl/test/runner/runner.go @@ -537,6 +537,19 @@ var testCases = []testCase{ shouldFail: true, expectedError: ":UNEXPECTED_MESSAGE:", }, + { + name: "DisableEverything", + flags: []string{"-no-tls12", "-no-tls11", "-no-tls1", "-no-ssl3"}, + shouldFail: true, + expectedError: ":WRONG_SSL_VERSION:", + }, + { + protocol: dtls, + name: "DisableEverything-DTLS", + flags: []string{"-no-tls12", "-no-tls1"}, + shouldFail: true, + expectedError: ":WRONG_SSL_VERSION:", + }, } func doExchange(test *testCase, config *Config, conn net.Conn, messageLen int, isResume bool) error { |