commit a1b8f6e91439ccb0fe9c71b621e1cb43a0feee80
author Ronald Cron <ronald.cron@arm.com> Fri Mar 18 14:04:12 2022 +0100
committer Ronald Cron <ronald.cron@arm.com> Tue Mar 29 18:58:31 2022 +0200
tree 795573d1ae271befa75dcfdc8ab870a1be9e23f2
parent f3b425bbded435d3f4a6b541adefea0a43517b25

ssl-opt.sh: Do not force TLS 1.3 on client

For TLS 1.3 tests, do not force TLS 1.3
version on client to play the negotiation
game whenever possible.

Signed-off-by: Ronald Cron <ronald.cron@arm.com>

tests/scripts/generate_tls13_compat_tests.py

diff --git a/tests/scripts/generate_tls13_compat_tests.py b/tests/scripts/generate_tls13_compat_tests.py
index 7ff07e7..506b80c 100755
--- a/tests/scripts/generate_tls13_compat_tests.py
+++ b/tests/scripts/generate_tls13_compat_tests.py
@@ -291,7 +291,7 @@
         super().cmd()
         ret = ['$P_CLI']
         ret += ['server_addr=127.0.0.1', 'server_port=$SRV_PORT',
-                'debug_level=4', 'force_version=tls13']
+                'debug_level=4']
         ret += ['ca_file={cafile}'.format(
             cafile=CERTIFICATES[self._cert_sig_algs[0]].cafile)]
 
@@ -325,7 +325,7 @@
         return ret
 
     def post_checks(self):
-        check_strings = []
+        check_strings = ["Protocol is TLSv1.3"]
         if self._ciphers:
             check_strings.append(
                 "server hello, chosen ciphersuite: ( {:04x} ) - {}".format(