Don't run the sigalgs tests over a TLSv1.3 connection
authorMatt Caswell <matt@openssl.org>
Fri, 30 Dec 2016 17:20:14 +0000 (17:20 +0000)
committerMatt Caswell <matt@openssl.org>
Fri, 30 Dec 2016 20:59:16 +0000 (20:59 +0000)
We need a new API for TLSv1.3 sig algs

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2160)

test/sslapitest.c

index 51073e604d6b7af8bbca3acb3c8d96cf8aa5f554..d20aec8ebb1aadfa3b33690d869bec5143aedd74 100644 (file)
@@ -937,6 +937,12 @@ static int test_set_sigalgs(int idx)
         return 0;
     }
 
+    /*
+     * TODO(TLS1.3): These APIs cannot set TLSv1.3 sig algs so we just test it
+     * for TLSv1.2 for now until we add a new API.
+     */
+    SSL_CTX_set_max_proto_version(cctx, TLS1_2_VERSION);
+
     if (testctx) {
         int ret;
         if (curr->list != NULL)