ssl-opt.sh: Establish TLS 1.2 then TLS 1.3 connection

Add a test where first we establish a
TLS 1.2 session, then a TLS 1.3 one
with the same server.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>
This commit is contained in:
Ronald Cron 2024-02-08 08:56:09 +01:00
parent 195c0bc24e
commit 587cfe65ca

View File

@ -11700,6 +11700,18 @@ run_test "TLS 1.3: Default" \
-s "ECDH/FFDH group: " \
-s "selected signature algorithm ecdsa_secp256r1_sha256"
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
requires_config_enabled MBEDTLS_SSL_TLS1_3_KEY_EXCHANGE_MODE_EPHEMERAL_ENABLED
requires_any_configs_enabled $TLS1_2_KEY_EXCHANGES_WITH_CERT
run_test "Establish TLS 1.2 then TLS 1.3 session" \
"$P_SRV" \
"( $P_CLI force_version=tls12; \
$P_CLI force_version=tls13 )" \
0 \
-s "Protocol is TLSv1.2" \
-s "Protocol is TLSv1.3" \
requires_openssl_tls1_3_with_compatible_ephemeral
requires_config_enabled MBEDTLS_DEBUG_C
requires_config_enabled MBEDTLS_SSL_CLI_C