You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@tomcat.apache.org by ma...@apache.org on 2022/12/05 15:00:07 UTC

[tomcat] branch main updated: Fix test failures with OpenSSL 3.1.x

This is an automated email from the ASF dual-hosted git repository.

markt pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomcat.git


The following commit(s) were added to refs/heads/main by this push:
     new 3ddbadbc7a Fix test failures with OpenSSL 3.1.x
3ddbadbc7a is described below

commit 3ddbadbc7a542c9735f79bd107d7436b22bc531b
Author: Mark Thomas <ma...@apache.org>
AuthorDate: Mon Dec 5 14:59:59 2022 +0000

    Fix test failures with OpenSSL 3.1.x
    
    The move of CCM8 ciphers from HIGH to medium has been deferred to 3.2.x.
---
 .../ciphers/TestOpenSSLCipherConfigurationParser.java        | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java b/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java
index dc8b007a63..5f301b5cae 100644
--- a/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java
+++ b/test/org/apache/tomcat/util/net/openssl/ciphers/TestOpenSSLCipherConfigurationParser.java
@@ -62,8 +62,8 @@ public class TestOpenSSLCipherConfigurationParser {
 
     @Test
     public void testHIGH() throws Exception {
-        if (TesterOpenSSL.VERSION < 30100) {
-            // OpenSSL 3.1.x moved the CCM8 ciphers from high to medium
+        if (TesterOpenSSL.VERSION < 30200) {
+            // OpenSSL 3.2.x moved the CCM8 ciphers from high to medium
             testSpecification("HIGH:!AESCCM8");
         } else {
             testSpecification("HIGH");
@@ -73,8 +73,8 @@ public class TestOpenSSLCipherConfigurationParser {
 
     @Test
     public void testMEDIUM() throws Exception {
-        if (TesterOpenSSL.VERSION < 30100) {
-            // OpenSSL 3.1.x moved the CCM8 ciphers from high to medium
+        if (TesterOpenSSL.VERSION < 30200) {
+            // OpenSSL 3.2.x moved the CCM8 ciphers from high to medium
             testSpecification("MEDIUM:AESCCM8");
         } else {
             testSpecification("MEDIUM");
@@ -533,8 +533,8 @@ public class TestOpenSSLCipherConfigurationParser {
         // Tomcat 8 default as of 2014-08-04
         // This gets an A- from https://www.ssllabs.com/ssltest with no FS for
         // a number of the reference browsers
-        if (TesterOpenSSL.VERSION < 30100) {
-            // OpenSSL 3.1.x moved the CCM8 ciphers from high to medium
+        if (TesterOpenSSL.VERSION < 30200) {
+            // OpenSSL 3.2.x moved the CCM8 ciphers from high to medium
             testSpecification("HIGH:!AESCCM8:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5");
         } else {
             testSpecification("HIGH:!aNULL:!eNULL:!EXPORT:!DES:!RC4:!MD5");


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org