mirrors/utls
1
0
Fork 0
mirror of https://github.com/refraction-networking/utls.git synced 2025-04-04 12:37:35 +03:00
Code Issues Projects Releases Packages Wiki Activity

crypto/tls: ensure that we don't resume when tickets are disabled.

Browse source 
LGTM=r
R=r, adg, rsc
https://golang.org/cl/148080043
This commit is contained in:
Adam Langley 2014-09-26 11:02:09 +10:00 • committed by Andrew Gerrand
parent bb890c0d27
commit a59ca4a0e7
5 changed files with 206 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

26
handshake_server_test.go
View file

@ -676,6 +676,32 @@ func TestResumption(t *testing.T) {
runServerTestTLS12(t, test)
}
func TestResumptionDisabled(t *testing.T) {
sessionFilePath := tempFile("")
defer os.Remove(sessionFilePath)
config := *testConfig
test := &serverTest{
name: "IssueTicketPreDisable",
command: []string{"openssl", "s_client", "-cipher", "RC4-SHA", "-sess_out", sessionFilePath},
config: &config,
}
runServerTestTLS12(t, test)
config.SessionTicketsDisabled = true
test = &serverTest{
name: "ResumeDisabled",
command: []string{"openssl", "s_client", "-cipher", "RC4-SHA", "-sess_in", sessionFilePath},
config: &config,
}
runServerTestTLS12(t, test)
// One needs to manually confirm that the handshake in the golden data
// file for ResumeDisabled does not include a resumption handshake.
}
// cert.pem and key.pem were generated with generate_cert.go
// Thus, they have no ExtKeyUsage fields and trigger an error
// when verification is turned on.