Fix compat.sh not running any tests on config-mini-tls1_1.h

We were only requesting 3DES cipher suites (which is weirdly restrictive since the configuration also includes AES), but DES is in the default exclusion list for compat.sh, so we ended up having no acceptable cipher suites. Fix this. Signed-off-by: Gilles Peskine <[email protected]>
Mbed-TLS · May 30, 2024 · 8f5722a · 8f5722a
1 parent 2ca5a68
commit 8f5722a
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/tests/scripts/test-ref-configs.pl b/tests/scripts/test-ref-configs.pl
@@ -27,7 +27,8 @@
         'test_again_with_use_psa' => 1
     },
     'config-mini-tls1_1.h' => {
-        'compat' => '-m tls1_1 -f \'^DES-CBC3-SHA$\|^TLS-RSA-WITH-3DES-EDE-CBC-SHA$\'', #',
+         # Include DES; exclude (EC)DH; only pure-RSA key exchanges
+        'compat' => '-m tls1_1 -e \'NULL\|RC4\|ARCFOUR\|ARIA\|CAMELLIA\|DH\|PSK\' -f RSA',
         ## Skip ssl-opt testing for now because ssl-opt.sh is missing a lot
         ## of requires_xxx so it would try to run tests that don't apply.
         # 'opt' => ' ',