File 0544-Filter-key_exchange-suites.patch of Package erlang

Overview Repositories Revisions Requests Users Attributes Meta

File 0544-Filter-key_exchange-suites.patch of Package erlang

From 2217be236d8af802c23eeea7a4775bca5e26da04 Mon Sep 17 00:00:00 2001
From: Nelson Vides <videsnelson@gmail.com>
Date: Wed, 5 May 2021 21:56:10 +0200
Subject: [PATCH 4/6] Filter key_exchange suites

---
 lib/ssl/test/ssl_api_SUITE.erl | 21 ++++++++++++---------
 1 file changed, 12 insertions(+), 9 deletions(-)

diff --git a/lib/ssl/test/ssl_api_SUITE.erl b/lib/ssl/test/ssl_api_SUITE.erl
index b1fffdcb06..553e835a20 100644
--- a/lib/ssl/test/ssl_api_SUITE.erl
+++ b/lib/ssl/test/ssl_api_SUITE.erl
@@ -2672,15 +2672,18 @@ prf_create_plan(TlsVer, PRFs, Results) when TlsVer == 'tlsv1.2' orelse TlsVer ==
       end, [], PRFs).
 
 prf_get_ciphers(TlsVer, PRF) ->
-    PrfFilter = fun(Value) ->
-                        case Value of
-                            PRF ->
-                                true;
-                            _ ->
-                                false
-                        end
-                end,
-    ssl:filter_cipher_suites(ssl:cipher_suites(all, TlsVer), [{prf, PrfFilter}]).
+    PrfFilter = fun(Value) -> Value =:= PRF end,
+    RSACertNoSpecialConf = fun(rsa) ->
+                                   true;
+                              (ecdhe_rsa) ->
+                                   lists:member(ecdh, crypto:supports(public_keys));
+                              (dhe_rsa) ->
+                                   true;
+                              (_) ->
+                                   false
+                           end,
+    ssl:filter_cipher_suites(ssl:cipher_suites(default, TlsVer), [{key_exchange, RSACertNoSpecialConf},
+                                                                  {prf, PrfFilter}]).
 
 prf_run_test(_, TlsVer, [], _, Prf) ->
     ct:comment(lists:flatten(io_lib:format("cipher_list_empty Ver: ~p  PRF: ~p", [TlsVer, Prf])));
-- 
2.26.2

Places

File 0544-Filter-key_exchange-suites.patch of Package erlang

Places