mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2024-12-28 15:17:21 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
fd71abe8dc
mbedtls/tests/configs/tls13-only.h

29 lines
908 B
C
Raw Normal View History

tls13_only: add tls13_only test component Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2021-12-24 10:45:45 +00:00
/* MBEDTLS_USER_CONFIG_FILE for testing.
* Only used for a few test configurations.
*
* Typical usage (note multiple levels of quoting):
* make CFLAGS="'-DMBEDTLS_USER_CONFIG_FILE=\"../tests/configs/tls13-only.h\"'"
*/
/*
* Copyright The Mbed TLS Contributors
update headers Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
2023-11-02 19:47:20 +00:00
* SPDX-License-Identifier: Apache-2.0 OR GPL-2.0-or-later
tls13_only: add tls13_only test component Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2021-12-24 10:45:45 +00:00
*/
Always enable MBEDTLS_TEST_HOOKS in TLS 1.3-only test configurations MBEDTLS_TEST_HOOKS is not supposed to change the behavior of the library, so it's generally good to have it on in functional tests. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-10-29 15:44:19 +00:00
/* Enable TLS 1.3 and core 1.3 features */
tls13_only: add tls13_only test component Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2021-12-24 10:45:45 +00:00
#define MBEDTLS_SSL_PROTO_TLS1_3
#define MBEDTLS_SSL_TLS1_3_COMPATIBILITY_MODE
Always enable MBEDTLS_TEST_HOOKS in TLS 1.3-only test configurations MBEDTLS_TEST_HOOKS is not supposed to change the behavior of the library, so it's generally good to have it on in functional tests. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-10-29 15:44:19 +00:00
/* Disable TLS 1.2 and 1.2-specific features */
remove ifndef guard Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-01-28 02:22:45 +00:00
#undef MBEDTLS_SSL_ENCRYPT_THEN_MAC
#undef MBEDTLS_SSL_EXTENDED_MASTER_SECRET
Disable MBEDTLS_SSL_RENEGOTIATION in tls13-only configuration There's no renegotiation in TLS 1.3, so this option should have no effect. Insist on having it disabled, to avoid the risk of accidentally having different behavior in TLS 1.3 if the option is enabled (as happened in https://github.com/Mbed-TLS/mbedtls/issues/6200). Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-08-12 20:43:18 +00:00
#undef MBEDTLS_SSL_RENEGOTIATION
remove ifndef guard Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2022-01-28 02:22:45 +00:00
#undef MBEDTLS_SSL_PROTO_TLS1_2
tls13_only: add tls13_only test component Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2021-12-24 10:45:45 +00:00
#undef MBEDTLS_SSL_PROTO_DTLS
#undef MBEDTLS_SSL_DTLS_ANTI_REPLAY
#undef MBEDTLS_SSL_DTLS_HELLO_VERIFY
Explicitly disable all DTLS options in tls13-only.h This makes no difference when starting from the default configuration. It allows tls13-only.h to be used with other base configurations such as `full`. Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>
2022-08-12 20:49:12 +00:00
#undef MBEDTLS_SSL_DTLS_SRTP
tls13_only: add tls13_only test component Signed-off-by: Jerry Yu <jerry.h.yu@arm.com>
2021-12-24 10:45:45 +00:00
#undef MBEDTLS_SSL_DTLS_CLIENT_PORT_REUSE
Fix test dependency on DTLS connection ID Ensure MBEDTLS_SSL_DTLS_CONNECTION_ID and MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT are unset when MBEDTLS_SSL_PROTO_DTLS is not set in tls13-only tests. Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
2022-10-27 08:47:21 +00:00
#undef MBEDTLS_SSL_DTLS_CONNECTION_ID
#undef MBEDTLS_SSL_DTLS_CONNECTION_ID_COMPAT
Reference in New Issue Copy Permalink