Blame tests/safe-renegotiation/README
|
Packit |
549fdc |
Testing safe renegotiation is relatively complex, here is a summary of
|
|
Packit |
549fdc |
what we test and what how we believe it should work.
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
srn0.c:
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
This tests that the safe renegotiation extension is negotiated
|
|
Packit |
549fdc |
properly by default on initial connections and on rehandshaked
|
|
Packit |
549fdc |
connections. Consequently, it also verifies that rehandshaked
|
|
Packit |
549fdc |
connections work with the extension enabled.
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
srn4.c:
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
This tests that clients without support for safe renegotiation is
|
|
Packit |
549fdc |
able to handshake properly against a default GnuTLS server, but
|
|
Packit |
549fdc |
that rehandshake will be refused by the server.
|
|
Packit |
549fdc |
|
|
Packit |
549fdc |
srn5.c:
|
|
Packit |
549fdc |
This tests that clients with support for safe renegotiation is able
|
|
Packit |
549fdc |
to handshake properly against a server with no support for safe
|
|
Packit |
549fdc |
renegotiation, but that the client will not be able to complete a
|
|
Packit |
549fdc |
rehandshake.
|