commit 465837b24d5bf4e135b2167b1243606b4c03a0b7
author Gilles Peskine <Gilles.Peskine@arm.com> Wed Sep 25 21:26:02 2024 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Wed Sep 25 21:26:02 2024 +0200
tree 1f4dd0092c3614d7c083d835a5d48a2b873ea98a
parent 533342589118c546a1b17c85ba03e8e5c46411cc

Disable session tickets for ssl_client1 when using TLS 1.3

TLS 1.3 session tickets require additional handling in the client.
https://github.com/Mbed-TLS/mbedtls/issues/8749

Disable session tickets for ssl_client1 when using TLS 1.3
until https://github.com/Mbed-TLS/mbedtls/issues/6640 is resolved
and (if relevant) implemented in ssl_client1.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

tests/opt-testcases/sample.sh

diff --git a/tests/opt-testcases/sample.sh b/tests/opt-testcases/sample.sh
index 8b2bc99..e2eaf24 100644
--- a/tests/opt-testcases/sample.sh
+++ b/tests/opt-testcases/sample.sh
@@ -6,9 +6,12 @@
 
 : ${PROGRAMS_DIR:=../programs/ssl}
 
+# Disable session tickets for ssl_client1 when potentially using TLS 1.3
+# until https://github.com/Mbed-TLS/mbedtls/issues/6640 is resolved
+# and (if relevant) implemented in ssl_client1.
 run_test    "Sample: ssl_client1, ssl_server2" \
             -P 4433 \
-            "$PROGRAMS_DIR/ssl_server2" \
+            "$PROGRAMS_DIR/ssl_server2 tickets=0" \
             "$PROGRAMS_DIR/ssl_client1" \
             0 \
             -s "[1-9][0-9]* bytes read" \
@@ -39,22 +42,28 @@
             -S "Error" \
             -C "error"
 
+# Disable session tickets for ssl_client1 when using TLS 1.3
+# until https://github.com/Mbed-TLS/mbedtls/issues/6640 is resolved
+# and (if relevant) implemented in ssl_client1.
 requires_protocol_version tls13
 requires_openssl_tls1_3
 run_test    "Sample: ssl_client1, openssl server, TLS 1.3" \
             -P 4433 \
-            "$O_NEXT_SRV -tls1_3" \
+            "$O_NEXT_SRV -tls1_3 -num_tickets 0" \
             "$PROGRAMS_DIR/ssl_client1" \
             0 \
             -c "New, TLSv1.3, Cipher is" \
             -S "ERROR" \
             -C "error"
 
+# Disable session tickets for ssl_client1 when using TLS 1.3
+# until https://github.com/Mbed-TLS/mbedtls/issues/6640 is resolved
+# and (if relevant) implemented in ssl_client1.
 requires_protocol_version tls13
 requires_gnutls_tls1_3
 run_test    "Sample: ssl_client1, gnutls server, TLS 1.3" \
             -P 4433 \
-            "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.3" \
+            "$G_NEXT_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.3 --noticket" \
             "$PROGRAMS_DIR/ssl_client1" \
             0 \
             -s "Version: TLS1.3" \