cd01f9ce21
Go 1.8 includes "crypto/tls: disable CBC cipher suites with SHA-256 by
default." which breaks the "TLS12-AES128-SHA256-server" test (among
others). Since this was fixed upstream (by removing the CBC tests), just
update the vendored copy using:
gvt update github.com/google/boringssl/ssl/test
Removed tests from config.json that are no longer present while at it.
25 lines
760 B
JSON
25 lines
760 B
JSON
{
|
|
"DisabledTests": {
|
|
"*HelloRetryRequest*": "HelloRetryRequest not implemented yet",
|
|
"*HRR*": "HelloRetryRequest not implemented yet",
|
|
"*SecondClientHello*": "HelloRetryRequest not implemented yet",
|
|
|
|
"SupportTicketsWithSessionID": "Session IDs not supported",
|
|
"*-NoTickets-*": "Session IDs not supported",
|
|
"*-AES256-SHA384-*": "AES256-CBC-SHA384 not supported",
|
|
|
|
"BadRSAClientKeyExchange-4": "See comment in processClientKeyExchange",
|
|
|
|
"GREASE-Server-TLS13": "TODO",
|
|
"DuplicateExtensionServer-*": "TODO",
|
|
"DuplicateKeyShares": "TODO",
|
|
"SkipEarlyData-TooMuchData": "TODO",
|
|
|
|
"Renegotiate-Server-Forbidden": "9b812d006d made OpenSSL tests lock up",
|
|
|
|
"*V2ClientHello*": "Yeah, no.",
|
|
"*SSL3*": "Fuck that.",
|
|
"*SSLv3*": "Really."
|
|
}
|
|
}
|