From: Matt Caswell <matt@openssl.org>
Date: Fri, 30 Dec 2016 17:20:14 +0000 (+0000)
Subject: Don't run the sigalgs tests over a TLSv1.3 connection
X-Git-Tag: OpenSSL_1_1_1-pre1~2810
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=d2e491f225d465b11f18a466bf399d4a899cb50e;p=oweals%2Fopenssl.git

Don't run the sigalgs tests over a TLSv1.3 connection

We need a new API for TLSv1.3 sig algs

Reviewed-by: Tim Hudson <tjh@openssl.org>
(Merged from https://github.com/openssl/openssl/pull/2160)
---

diff --git a/test/sslapitest.c b/test/sslapitest.c
index 51073e604d..d20aec8ebb 100644
--- a/test/sslapitest.c
+++ b/test/sslapitest.c
@@ -937,6 +937,12 @@ static int test_set_sigalgs(int idx)
         return 0;
     }
 
+    /*
+     * TODO(TLS1.3): These APIs cannot set TLSv1.3 sig algs so we just test it
+     * for TLSv1.2 for now until we add a new API.
+     */
+    SSL_CTX_set_max_proto_version(cctx, TLS1_2_VERSION);
+
     if (testctx) {
         int ret;
         if (curr->list != NULL)