Blame SOURCES/openssl-1.1.1-no-brainpool.patch

cf3dd1
diff -up openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.in.no-brainpool openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.in
cf3dd1
--- openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.in.no-brainpool	2019-09-10 15:13:07.000000000 +0200
cf3dd1
+++ openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.in	2019-09-13 15:11:07.358687169 +0200
cf3dd1
@@ -147,22 +147,22 @@ our @tests = (
782d48
     {
782d48
         name => "ECDSA with brainpool",
782d48
         server =>  {
782d48
-            "Certificate" => test_pem("server-ecdsa-brainpoolP256r1-cert.pem"),
782d48
-            "PrivateKey" => test_pem("server-ecdsa-brainpoolP256r1-key.pem"),
782d48
-            "Groups" => "brainpoolP256r1",
cf3dd1
+            "Certificate" => test_pem("server-ecdsa-cert.pem"),
cf3dd1
+            "PrivateKey" => test_pem("server-ecdsa-key.pem"),
782d48
+#            "Groups" => "brainpoolP256r1",
782d48
         },
782d48
         client => {
782d48
             #We don't restrict this to TLSv1.2, although use of brainpool
782d48
             #should force this anyway so that this should succeed
782d48
             "CipherString" => "aECDSA",
782d48
             "RequestCAFile" => test_pem("root-cert.pem"),
782d48
-            "Groups" => "brainpoolP256r1",
782d48
+#            "Groups" => "brainpoolP256r1",
782d48
         },
782d48
         test   => {
782d48
-            "ExpectedServerCertType" =>, "brainpoolP256r1",
782d48
-            "ExpectedServerSignType" =>, "EC",
782d48
+#            "ExpectedServerCertType" =>, "brainpoolP256r1",
782d48
+#            "ExpectedServerSignType" =>, "EC",
782d48
             # Note: certificate_authorities not sent for TLS < 1.3
782d48
-            "ExpectedServerCANames" =>, "empty",
782d48
+#            "ExpectedServerCANames" =>, "empty",
782d48
             "ExpectedResult" => "Success"
782d48
         },
782d48
     },
cf3dd1
@@ -853,18 +853,18 @@ my @tests_tls_1_3 = (
782d48
     {
782d48
         name => "TLS 1.3 ECDSA with brainpool",
782d48
         server =>  {
782d48
-            "Certificate" => test_pem("server-ecdsa-brainpoolP256r1-cert.pem"),
782d48
-            "PrivateKey" => test_pem("server-ecdsa-brainpoolP256r1-key.pem"),
782d48
-            "Groups" => "brainpoolP256r1",
cf3dd1
+            "Certificate" => test_pem("server-ecdsa-cert.pem"),
cf3dd1
+            "PrivateKey" => test_pem("server-ecdsa-key.pem"),
782d48
+#            "Groups" => "brainpoolP256r1",
782d48
         },
782d48
         client => {
782d48
             "RequestCAFile" => test_pem("root-cert.pem"),
782d48
-            "Groups" => "brainpoolP256r1",
782d48
+#            "Groups" => "brainpoolP256r1",
782d48
             "MinProtocol" => "TLSv1.3",
782d48
             "MaxProtocol" => "TLSv1.3"
782d48
         },
782d48
         test   => {
782d48
-            "ExpectedResult" => "ServerFail"
782d48
+            "ExpectedResult" => "Success"
782d48
         },
782d48
     },
782d48
 );
cf3dd1
diff -up openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.no-brainpool openssl-1.1.1d/test/ssl-tests/20-cert-select.conf
cf3dd1
--- openssl-1.1.1d/test/ssl-tests/20-cert-select.conf.no-brainpool	2019-09-10 15:13:07.000000000 +0200
cf3dd1
+++ openssl-1.1.1d/test/ssl-tests/20-cert-select.conf	2019-09-13 15:12:27.380288469 +0200
cf3dd1
@@ -238,23 +238,18 @@ server = 5-ECDSA with brainpool-server
782d48
 client = 5-ECDSA with brainpool-client
782d48
 
782d48
 [5-ECDSA with brainpool-server]
782d48
-Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-cert.pem
cf3dd1
+Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
cf3dd1
 CipherString = DEFAULT
782d48
-Groups = brainpoolP256r1
782d48
-PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-key.pem
cf3dd1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
782d48
 
782d48
 [5-ECDSA with brainpool-client]
782d48
 CipherString = aECDSA
782d48
-Groups = brainpoolP256r1
782d48
 RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
782d48
 VerifyCAFile = ${ENV::TEST_CERTS_DIR}/rootcert.pem
782d48
 VerifyMode = Peer
782d48
 
782d48
 [test-5]
782d48
 ExpectedResult = Success
782d48
-ExpectedServerCANames = empty
782d48
-ExpectedServerCertType = brainpoolP256r1
782d48
-ExpectedServerSignType = EC
782d48
 
782d48
 
782d48
 # ===========================================================
cf3dd1
@@ -1713,14 +1708,12 @@ server = 52-TLS 1.3 ECDSA with brainpool
cf3dd1
 client = 52-TLS 1.3 ECDSA with brainpool-client
782d48
 
cf3dd1
 [52-TLS 1.3 ECDSA with brainpool-server]
782d48
-Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-cert.pem
cf3dd1
+Certificate = ${ENV::TEST_CERTS_DIR}/server-ecdsa-cert.pem
cf3dd1
 CipherString = DEFAULT
782d48
-Groups = brainpoolP256r1
782d48
-PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-brainpoolP256r1-key.pem
cf3dd1
+PrivateKey = ${ENV::TEST_CERTS_DIR}/server-ecdsa-key.pem
782d48
 
cf3dd1
 [52-TLS 1.3 ECDSA with brainpool-client]
782d48
 CipherString = DEFAULT
782d48
-Groups = brainpoolP256r1
782d48
 MaxProtocol = TLSv1.3
782d48
 MinProtocol = TLSv1.3
782d48
 RequestCAFile = ${ENV::TEST_CERTS_DIR}/root-cert.pem
cf3dd1
@@ -1728,7 +1721,7 @@ VerifyCAFile = ${ENV::TEST_CERTS_DIR}/ro
782d48
 VerifyMode = Peer
782d48
 
cf3dd1
 [test-52]
782d48
-ExpectedResult = ServerFail
782d48
+ExpectedResult = Success
782d48
 
782d48
 
782d48
 # ===========================================================