Merge pull request #755 from tlsfuzzer/ocsp-with-renego

test-renegotiation-changed-clienthello: fix with ocsp enabled
tlsfuzzer · Aug 6, 2021 · ac24ad7 · ac24ad7
2 parents 2a65dc0 + 81eb1fe
commit ac24ad7
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/scripts/test-renegotiation-changed-clienthello.py b/scripts/test-renegotiation-changed-clienthello.py
@@ -243,6 +243,8 @@ def main():
     node = node.add_child(ExpectServerHello(
         description="second handshake"))
     node = node.add_child(ExpectCertificate())
+    if ocsp:
+        node = node.add_child(ExpectCertificateStatus())
     if dhe:
         node = node.add_child(ExpectServerKeyExchange())
     node = node.add_child(ExpectServerHelloDone())
@@ -355,6 +357,8 @@ def main():
             node = node.add_child(ExpectServerHello(
                 description="second handshake"))
             node = node.add_child(ExpectCertificate())
+            if ocsp and drop_ext != ExtensionType.status_request:
+                node = node.add_child(ExpectCertificateStatus())
             if dhe:
                 node = node.add_child(ExpectServerKeyExchange())
             node = node.add_child(ExpectServerHelloDone())