[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Test suite and OpenSSL 1.1.1


Am 20.10.2018 um 09:39 schrieb Christophe JAILLET:
Le 20/10/2018 à 06:28, Rainer Jung a écrit :
Am 19.10.2018 um 23:31 schrieb Yann Ylavic:
Could not make the test suite framework work with 1.1.1 (cpan -u didn't help).
Although the ssl tests report SUCCESS, httpd actually timeouts on
SSL_peek() (as already reported).

Indeed I checked my test suite logs and until now all tests only used TLS 1.2. But what works for me now with TLS 1.3 is:

- small fix in TestSSLCA.pm (r1844389), otherwise the geneated t/conf/ssl/ssl.conf always contains "SSLProtocol all -TLSv1.3" instead of "all" (unless you specifiy -sslproto explicitly).

I've just updated the test framework.
make clean
--> ssl.conf rebuilt

But I still have:
    SSLProtocol all -TLSv1.3

I didn't manage to rebuild ssl.conf using make, but what I did to rebuild was a "t/TEST -v -configure" and to make sure I removed the ssl.conf file before running that command. This resulted in a new file with "all" in it.

Please also double check, that TestSSLCA.pm contains the line "use Net::SSLeay;".

Does it work with that recipe?

Thanks and regards,