Merge pull request #774 from tlsfuzzer/lucky13-dhe

lucky13: make test work with (EC)DHE ciphers
tlsfuzzer · Sep 3, 2021 · 85f9c1e · 85f9c1e
2 parents a770342 + bb3dfc9
commit 85f9c1e
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/scripts/test-lucky13.py b/scripts/test-lucky13.py
@@ -167,10 +167,10 @@ def main():
     ext[ExtensionType.signature_algorithms_cert] = \
         SignatureAlgorithmsCertExtension().create(SIG_ALL)
     if dhe:
-        groups = [GroupName.secp256r1,
+        sup_groups = [GroupName.secp256r1,
                   GroupName.ffdhe2048]
         ext[ExtensionType.supported_groups] = SupportedGroupsExtension() \
-            .create(groups)
+            .create(sup_groups)
 
     # first run sanity test and verify that server supports this ciphersuite
     conversation = Connect(host, port)

diff --git a/tests/tlslite-ng-random-subset.json b/tests/tlslite-ng-random-subset.json
@@ -188,6 +188,8 @@
           "exp_pass" : false},
          {"name":  "test-lucky13.py",
           "arguments" :  ["--quick"]},
+         {"name":  "test-lucky13.py",
+          "arguments" :  ["--quick", "-C", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"]},
          {"name" : "test-message-duplication.py"},
          {"name" : "test-message-skipping.py"},
          {"name" : "test-message-skipping.py",

diff --git a/tests/tlslite-ng.json b/tests/tlslite-ng.json
@@ -189,6 +189,8 @@
           "exp_pass" : false},
          {"name":  "test-lucky13.py",
           "arguments" :  ["--quick"]},
+         {"name":  "test-lucky13.py",
+          "arguments" :  ["--quick", "-C", "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384"]},
          {"name" : "test-message-duplication.py"},
          {"name" : "test-message-skipping.py"},
          {"name" : "test-message-skipping.py",