aboutsummaryrefslogtreecommitdiff
path: root/src/testcurl/https/test_tls_options.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/testcurl/https/test_tls_options.c')
-rw-r--r--src/testcurl/https/test_tls_options.c47
1 files changed, 0 insertions, 47 deletions
diff --git a/src/testcurl/https/test_tls_options.c b/src/testcurl/https/test_tls_options.c
index edf32d94..7dd01a72 100644
--- a/src/testcurl/https/test_tls_options.c
+++ b/src/testcurl/https/test_tls_options.c
@@ -134,53 +134,6 @@ main (int argc, char *const *argv)
134 fprintf (stderr, "TLS1.0-AES-SHA1 test failed\n"); 134 fprintf (stderr, "TLS1.0-AES-SHA1 test failed\n");
135 errorCount++; 135 errorCount++;
136 } 136 }
137#if 0
138 /* this used to work, but somehow no longer. gnutls issue? */
139 if (0 !=
140 test_wrap ("SSL3.0-AES256-SHA1",
141 &test_https_transfer, NULL, daemon_flags,
142 aes256_sha,
143 CURL_SSLVERSION_SSLv3,
144 MHD_OPTION_HTTPS_MEM_KEY, srv_key_pem,
145 MHD_OPTION_HTTPS_MEM_CERT, srv_self_signed_cert_pem,
146 MHD_OPTION_HTTPS_PRIORITIES, "NONE:+VERS-SSL3.0:+AES-256-CBC:+SHA1:+RSA:+COMP-NULL",
147 MHD_OPTION_END))
148 {
149 fprintf (stderr, "SSL3.0-AES256-SHA1 test failed\n");
150 errorCount++;
151 }
152 if (0 !=
153 test_wrap ("SSL3.0-AES-SHA1",
154 &test_https_transfer, NULL, daemon_flags,
155 aes128_sha,
156 CURL_SSLVERSION_SSLv3,
157 MHD_OPTION_HTTPS_MEM_KEY, srv_key_pem,
158 MHD_OPTION_HTTPS_MEM_CERT, srv_self_signed_cert_pem,
159 MHD_OPTION_HTTPS_PRIORITIES, "NONE:+VERS-SSL3.0:+AES-128-CBC:+SHA1:+RSA:+COMP-NULL",
160 MHD_OPTION_END))
161 {
162 fprintf (stderr, "SSL3.0-AES-SHA1 test failed\n");
163 errorCount++;
164 }
165#endif
166
167
168#if 0
169 /* manual inspection of the handshake suggests that CURL will
170 request TLSv1, we send back "SSL3" and CURL takes it *despite*
171 being configured to speak SSL3-only. Notably, the other way
172 round (have curl request SSL3, respond with TLSv1 only)
173 is properly refused by CURL. Either way, this does NOT seem
174 to be a bug in MHD/gnuTLS but rather in CURL; hence this
175 test is commented out here... */
176 errorCount +=
177 test_wrap ("unmatching version: SSL3 vs. TLS", &test_unmatching_ssl_version,
178 NULL, daemon_flags, "AES256-SHA", CURL_SSLVERSION_TLSv1,
179 MHD_OPTION_HTTPS_MEM_KEY, srv_key_pem,
180 MHD_OPTION_HTTPS_MEM_CERT, srv_self_signed_cert_pem,
181 MHD_OPTION_CIPHER_ALGORITHM, "SSL3", MHD_OPTION_END);
182#endif
183
184 fprintf (stderr, 137 fprintf (stderr,
185 "The following handshake should fail (and print an error message)...\n"); 138 "The following handshake should fail (and print an error message)...\n");
186 if (0 != 139 if (0 !=