]> granicus.if.org Git - php/commitdiff
Prevent use of TLS 1.3 in stream_server_reneg_limit.phpt
authorNikita Popov <nikita.ppv@gmail.com>
Mon, 3 Jun 2019 16:58:52 +0000 (18:58 +0200)
committerNikita Popov <nikita.ppv@gmail.com>
Mon, 3 Jun 2019 16:58:52 +0000 (18:58 +0200)
TLS 1.3 does not support renegotiation, make sure this test does
not use it.

ext/openssl/tests/stream_server_reneg_limit.phpt

index 04d1dc1f7a2fb0f6700aa7831ae67b097f733489..47044b53e8a491d428174e2548089ede45d9054a 100644 (file)
@@ -28,6 +28,8 @@ $serverCode = <<<'CODE'
     $serverFlags = STREAM_SERVER_BIND | STREAM_SERVER_LISTEN;
     $serverCtx = stream_context_create(['ssl' => [
         'local_cert' => '%s',
+        // TLS 1.3 does not support renegotiation.
+        'max_proto_version' => STREAM_CRYPTO_PROTO_TLSv1_2,
         'reneg_limit' => 0,
         'reneg_window' => 30,
         'reneg_limit_callback' => function($stream) use (&$printed) {