From cc7d6ae95fa344eea84c490e9c9588767df17755 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Wed, 11 Sep 2024 21:03:05 +0200 Subject: [PATCH] Note known issue about test cases skipped in TLS 1.3-only builds https://github.com/Mbed-TLS/mbedtls/issues/9560 Signed-off-by: Gilles Peskine --- tests/ssl-opt.sh | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh index 497abe9dd2..1c7db2c284 100755 --- a/tests/ssl-opt.sh +++ b/tests/ssl-opt.sh @@ -1812,7 +1812,10 @@ run_test() { # Check if we are trying to use an external tool which does not support ECDH EXT_WO_ECDH=$(use_ext_tool_without_ecdh_support "$SRV_CMD" "$CLI_CMD") - # Guess the TLS version which is going to be used + # Guess the TLS version which is going to be used. + # Note that this detection is wrong in some cases, which causes unduly + # skipped test cases in builds with TLS 1.3 but not TLS 1.2. + # https://github.com/Mbed-TLS/mbedtls/issues/9560 if [ "$EXT_WO_ECDH" = "no" ]; then TLS_VERSION=$(get_tls_version "$SRV_CMD" "$CLI_CMD") else