|
 |
fde2a68 |
From 261353a42d0dc0e7bf73e5a8fb8ecffd04249d42 Mon Sep 17 00:00:00 2001
|
|
|
fde2a68 |
From: Kazuki Yamaguchi <k@rhe.jp>
|
|
|
fde2a68 |
Date: Tue, 27 Jun 2017 14:31:09 +0900
|
|
|
fde2a68 |
Subject: [PATCH] test/test_ssl: allow 3DES cipher suites in
|
|
|
fde2a68 |
test_sslctx_set_params
|
|
|
fde2a68 |
|
|
|
fde2a68 |
Fedora's OpenSSL seems to enable 3DES cipher suites by DEFAULT.
|
|
|
fde2a68 |
|
|
|
fde2a68 |
Fixes: https://github.com/ruby/openssl/issues/127
|
|
|
fde2a68 |
---
|
|
|
fde2a68 |
test/test_ssl.rb | 2 +-
|
|
|
fde2a68 |
1 file changed, 1 insertion(+), 1 deletion(-)
|
|
|
fde2a68 |
|
|
|
fde2a68 |
diff --git a/test/openssl/test_ssl.rb b/test/openssl/test_ssl.rb
|
|
|
fde2a68 |
index 19066566..b3efe95a 100644
|
|
|
fde2a68 |
--- a/test/openssl/test_ssl.rb
|
|
|
fde2a68 |
+++ b/test/openssl/test_ssl.rb
|
|
|
fde2a68 |
@@ -350,7 +350,7 @@ def test_sslctx_set_params
|
|
|
fde2a68 |
assert_equal OpenSSL::SSL::VERIFY_PEER, ctx.verify_mode
|
|
|
fde2a68 |
ciphers_names = ctx.ciphers.collect{|v, _, _, _| v }
|
|
|
fde2a68 |
assert ciphers_names.all?{|v| /A(EC)?DH/ !~ v }, "anon ciphers are disabled"
|
|
|
fde2a68 |
- assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES)/ !~ v }, "weak ciphers are disabled"
|
|
|
fde2a68 |
+ assert ciphers_names.all?{|v| /(RC4|MD5|EXP|DES(?!-EDE|-CBC3))/ !~ v }, "weak ciphers are disabled"
|
|
|
fde2a68 |
assert_equal 0, ctx.options & OpenSSL::SSL::OP_DONT_INSERT_EMPTY_FRAGMENTS
|
|
|
fde2a68 |
if defined?(OpenSSL::SSL::OP_NO_COMPRESSION) # >= 1.0.0
|
|
|
fde2a68 |
assert_equal OpenSSL::SSL::OP_NO_COMPRESSION,
|