[gnutls-devel] GnuTLS | tests: improve record_size_limit tests (!1023)

Development of GNU's TLS library gnutls-devel at lists.gnutls.org
Sat Jun 15 09:56:53 CEST 2019




Nikos Mavrogiannopoulos commented on a discussion on src/tests.c: https://gitlab.com/gnutls/gnutls/merge_requests/1023#note_181647440

>  #define ALL_MACS "+MAC-ALL:+MD5:+SHA1"
>  #define ALL_KX "+RSA:+DHE-RSA:+DHE-DSS:+ANON-DH:+ECDHE-RSA:+ECDHE-ECDSA:+ANON-ECDH"
>  #define INIT_STR "NONE:"
> -char rest[128] = "%UNSAFE_RENEGOTIATION:+SIGN-ALL:+GROUP-ALL";
> +char rest[128] = "%UNSAFE_RENEGOTIATION:%ALLOW_SMALL_RECORDS:+SIGN-ALL:+GROUP-ALL";

Thanks that's great. Would it make sense to verify that the check works as expected under gnutls, via `tests/gnutls-cli-debug.sh`?

-- 
Reply to this email directly or view it on GitLab: https://gitlab.com/gnutls/gnutls/merge_requests/1023#note_181647440
You're receiving this email because of your account on gitlab.com.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.gnupg.org/pipermail/gnutls-devel/attachments/20190615/b43971aa/attachment.html>


More information about the Gnutls-devel mailing list