commit 2739313cea0bfb897594a4d67c6299a053b10948
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Wed Sep 24 14:41:11 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:32:35 2014 +0200
tree 0d6c2a7d429fd3ca27485e77d55bccdb6029e9e9
parent 8464a46b6b1303246b8cb1708ba0479e45c54491

Make anti-replay a runtime option

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index 0fce954..a145cd7 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -2133,6 +2133,18 @@
             -s "Extra-header:" \
             -c "HTTP/1.0 200 OK"
 
+run_test    "DTLS proxy: duplicate every packet, server anti-replay off" \
+            -p "$P_PXY duplicate=1" \
+            "$P_SRV dtls=1 debug_level=1 anti_replay=0" \
+            "$P_CLI dtls=1 debug_level=1" \
+            0 \
+            -c "replayed record" \
+            -S "replayed record" \
+            -c "discarding invalid record" \
+            -s "discarding invalid record" \
+            -s "Extra-header:" \
+            -c "HTTP/1.0 200 OK"
+
 run_test    "DTLS proxy: inject invalid AD record" \
             -p "$P_PXY bad_ad=1" \
             "$P_SRV dtls=1 debug_level=1" \