maskit opened a new pull request, #13723: URL: https://github.com/apache/trafficserver/pull/13723
tls_sni_groups checked the key exchange group in curl's verbose "SSL connection using" line. curl only fills in the group when it is linked against OpenSSL 3.x, and only spells it "x25519" from 3.2 on; a BoringSSL build prints "[blank]", so the x25519 and X25519MLKEM768 runs could never pass there. The two runs now make the connection with openssl s_client, which prints the negotiated group on its temp key line or, for TLS 1.3 groups with no legacy key type, its TLS 1.3 group line. The test still checks the group rather than only the version and cipher. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
