Skip to content

Commit b703ac8

Browse files
Fix cipher suite syntax in requires call
Signed-off-by: Gilles Peskine <[email protected]>
1 parent ab20639 commit b703ac8

File tree

1 file changed

+3
-2
lines changed

1 file changed

+3
-2
lines changed

scripts/generate_tls_handshake_tests.py

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -117,16 +117,17 @@ def write_tls_handshake_defragmentation_test(
117117
]
118118

119119
if cipher is not None:
120+
mbedtls_cipher = translate_ciphers.translate_mbedtls(cipher)
120121
if side == Side.CLIENT:
121-
our_args += ' force_ciphersuite=' + translate_ciphers.translate_mbedtls(cipher)
122+
our_args += ' force_ciphersuite=' + mbedtls_cipher
122123
if 'NULL' in cipher:
123124
their_args += ' -cipher ALL@SECLEVEL=0:COMPLEMENTOFALL@SECLEVEL=0'
124125
else:
125126
# For TLS 1.2, when Mbed TLS is the server, we must force the
126127
# cipher suite on the client side, because passing
127128
# force_ciphersuite to ssl_server2 would force a TLS-1.2-only
128129
# server, which does not support a fragmented ClientHello.
129-
tc.requirements.append('requires_ciphersuite_enabled ' + cipher)
130+
tc.requirements.append('requires_ciphersuite_enabled ' + mbedtls_cipher)
130131
their_args += ' -cipher ' + translate_ciphers.translate_ossl(cipher)
131132
if 'NULL' in cipher:
132133
their_args += '@SECLEVEL=0'

0 commit comments

Comments
 (0)