# HG changeset patch
# User Sergey Kandaurov <pluk...@nginx.com>
# Date 1680879680 -14400
#      Fri Apr 07 19:01:20 2023 +0400
# Node ID f1f9fe0d4d7e2cda34cfb85721e4888f5991df49
# Parent  1197c152215b640aef0bdd3c3072f686298347b3
Tests: stick ssl_sni_reneg.t with TLSv1.2.

To make it run after enabling TLSv1.3 by default in nginx 1.23.4.

diff --git a/ssl_sni_reneg.t b/ssl_sni_reneg.t
--- a/ssl_sni_reneg.t
+++ b/ssl_sni_reneg.t
@@ -55,6 +55,7 @@ http {
 
     ssl_certificate_key localhost.key;
     ssl_certificate localhost.crt;
+    ssl_protocols TLSv1.2;
 
     server {
         listen       127.0.0.1:8080 ssl;
@@ -93,13 +94,6 @@ foreach my $name ('localhost') {
 }
 
 $t->run();
-
-{
-       my (undef, $ssl) = get_ssl_socket(8080);
-       plan(skip_all => "TLS 1.3 forbids renegotiation")
-               if Net::SSLeay::version($ssl) > 0x0303;
-}
-
 $t->plan(8);
 
 ###############################################################################
_______________________________________________
nginx-devel mailing list
nginx-devel@nginx.org
https://mailman.nginx.org/mailman/listinfo/nginx-devel

Reply via email to