0
0
mirror of https://github.com/OpenVPN/openvpn3.git synced 2024-09-19 19:52:15 +02:00

Fix iv_ciphers_legacy unit test if TLS library does not support BF-CBC

When running the unit test with mbed TLS 3.0, the library does not support
BF-CBC anymore. So we need to exclude BF-CBC from the expected result in
this case.

Signed-off-by: Arne Schwabe <arne@openvpn.net>
This commit is contained in:
Arne Schwabe 2024-07-12 00:22:33 +02:00 committed by Jenkins-dev
parent e46f663b07
commit b5f677e0b0

View File

@ -1325,7 +1325,15 @@ TEST(proto, iv_ciphers_legacy)
auto ivciphers = infostring.substr(infostring.find("IV_CIPHERS="));
ivciphers = ivciphers.substr(0, ivciphers.find("\n"));
std::string expectedstr{"IV_CIPHERS=none:AES-128-CBC:AES-192-CBC:AES-256-CBC:DES-CBC:DES-EDE3-CBC:BF-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM"};
std::string expectedstr{"IV_CIPHERS=none:AES-128-CBC:AES-192-CBC:AES-256-CBC:DES-CBC:DES-EDE3-CBC"};
if (SSLLib::CryptoAPI::CipherContext::is_supported(libctx, openvpn::CryptoAlgs::BF_CBC))
expectedstr += ":BF-CBC";
expectedstr += ":AES-128-GCM:AES-192-GCM:AES-256-GCM";
if (SSLLib::CryptoAPI::CipherContextAEAD::is_supported(nullptr, openvpn::CryptoAlgs::CHACHA20_POLY1305))
expectedstr += ":CHACHA20-POLY1305";