commit 63eca930d7fac35b073ac2a72f1dfd7cb6f0158d
author Manuel Pégourié-Gonnard <mpg@elzevir.fr> Mon Sep 08 16:39:08 2014 +0200
committer Paul Bakker <p.j.bakker@polarssl.org> Tue Oct 21 16:30:28 2014 +0200
tree 492c577fcc7650b7659da7db4e93312e7ce87e0e
parent 167a37632d204f0a260e66d532fda4b226b8fbed

Drop invalid records with DTLS

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index c7758b8..f375b1b 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -2104,6 +2104,7 @@
             "$P_SRV dtls=1" \
             "$P_CLI dtls=1" \
             0 \
+            -s "Extra-header:" \
             -c "HTTP/1.0 200 OK"
 
 run_test    "DTLS proxy: some duplication" \
@@ -2111,6 +2112,7 @@
             "$P_SRV dtls=1" \
             "$P_CLI dtls=1" \
             0 \
+            -s "Extra-header:" \
             -c "HTTP/1.0 200 OK"
 
 run_test    "DTLS proxy: lots of duplication" \
@@ -2118,6 +2120,15 @@
             "$P_SRV dtls=1" \
             "$P_CLI dtls=1" \
             0 \
+            -s "Extra-header:" \
+            -c "HTTP/1.0 200 OK"
+
+run_test    "DTLS proxy: inject invalid AD record" \
+            -p "$P_PXY bad_ad=1" \
+            "$P_SRV dtls=1" \
+            "$P_CLI dtls=1" \
+            0 \
+            -s "Extra-header:" \
             -c "HTTP/1.0 200 OK"
 
 # Final report