commit 2310c1970b218a5d53084e4df3957f49ab017166
author Max Fillinger <maximilian.fillinger@foxcrypto.com> Thu Nov 14 17:50:42 2024 +0100
committer Max Fillinger <maximilian.fillinger@foxcrypto.com> Wed Apr 16 11:24:50 2025 +0200
tree 872d0cfca4727ca60b703667141da0986c24f1ab
parent e009158d718bf5bcfe85bf2b2cdf4be6e308e4cc

Add fixed compatibility test for TLS 1.3 Exporter

When testing TLS 1.3, use O_NEXT_CLI.

Signed-off-by: Max Fillinger <maximilian.fillinger@foxcrypto.com>

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index 5ebe657..a4e5809 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -2022,14 +2022,14 @@
     unset EXPORTED_KEY2
     TLS_VERSION="$1"
 
-    case TLS_VERSION in
-        tls12) TLS_VERSION_PRINT="TLS 1.2";;
-        tls13) TLS_VERSION_PRINT="TLS 1.3";;
+    case $TLS_VERSION in
+        tls12) TLS_VERSION_PRINT="TLS 1.2"; OPENSSL_CLIENT="$O_CLI";;
+        tls13) TLS_VERSION_PRINT="TLS 1.3"; OPENSSL_CLIENT="$O_NEXT_CLI";;
     esac
 
     run_test    "$TLS_VERSION_PRINT: Export keying material (OpenSSL compatibility)" \
                 "$P_SRV debug_level=4 force_version=$TLS_VERSION exp_label=test-label" \
-                "$O_CLI -keymatexport test-label" \
+                "$OPENSSL_CLIENT -keymatexport test-label" \
                 0 \
                 -s "Exporting key of length 20 with label \".*\": 0x" \
                 -c "Keying material exporter:" \
@@ -3211,6 +3211,11 @@
 requires_protocol_version tls13
 run_test_export_keying_material tls13
 
+requires_config_enabled MBEDTLS_SSL_KEYING_MATERIAL_EXPORT
+requires_protocol_version tls13
+requires_openssl_next
+run_test_export_keying_material_openssl_compat tls13
+
 rm -f context_srv.txt
 rm -f context_cli.txt