Changeset c33ef88 in mod_gnutls for test/tests/23_TLS_reverse_proxy_mismatched_priorities

Timestamp:

Sep 28, 2018, 11:22:30 AM (3 years ago)

Author:

Fiona Klute <fiona.klute@…>

Branches:

asyncio, debian/master, master, proxy-ticket

Children:

eb4cab7

Parents:

72b669e

Message:

Test suite: Use ciphers, not protocol versions for priority mismatch test

This works around a bug in GnuTLS 3.6.4 (gnutls_priority_set in post
client hello function breaks handshake for clients with TLS versions
before TLS 1.3), see ​https://gitlab.com/gnutls/gnutls/issues/580

Location:

test/tests/23_TLS_reverse_proxy_mismatched_priorities

Files:

• apache.conf (modified) (1 diff)
• backend.conf (modified) (1 diff)

test/tests/23_TLS_reverse_proxy_mismatched_priorities/apache.conf

@@ -13 +13 @@
  GnuTLSProxyEngine      On
  GnuTLSProxyCAFile      authority/x509.pem
- GnuTLSProxyPriorities  NORMAL:-VERS-TLS-ALL:+VERS-TLS1.2
+ GnuTLSProxyPriorities  NORMAL:-CIPHER-ALL:+AES-256-GCM
  ProxyPass /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/
  ProxyPassReverse /proxy/ https://${BACKEND_HOST}:${BACKEND_PORT}/

test/tests/23_TLS_reverse_proxy_mismatched_priorities/backend.conf

@@ -8 +8 @@
  GnuTLSCertificateFile server/x509.pem
  GnuTLSKeyFile server/secret.key
- GnuTLSPriorities NORMAL:-VERS-TLS1.2
+ GnuTLSPriorities       NORMAL:-AES-256-GCM
 </VirtualHost>