From 937c70ac903bdc8fe0263e33dbcfca4b7bc0031b Mon Sep 17 00:00:00 2001 From: David Horstmann Date: Fri, 13 Mar 2026 18:04:16 +0000 Subject: [PATCH] Do not check fail cases for verify skipped In testcases where we are expecting handshake failure the message "Certificate verification was skipped" is not printed, so do not check for it. Signed-off-by: David Horstmann --- tests/opt-testcases/tls13-kex-modes.sh | 36 +++++++++----------------- 1 file changed, 12 insertions(+), 24 deletions(-) diff --git a/tests/opt-testcases/tls13-kex-modes.sh b/tests/opt-testcases/tls13-kex-modes.sh index f0984c5fb2..a8864559e8 100644 --- a/tests/opt-testcases/tls13-kex-modes.sh +++ b/tests/opt-testcases/tls13-kex-modes.sh @@ -526,8 +526,7 @@ run_test "TLS 1.3: G->m: ephemeral_all/ephemeral_all, fail, key material mism -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -593,8 +592,7 @@ run_test "TLS 1.3: G->m: all/ephemeral_all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -687,8 +685,7 @@ run_test "TLS 1.3: G->m: ephemeral_all/all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -757,8 +754,7 @@ run_test "TLS 1.3: G->m: all/all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -804,8 +800,7 @@ run_test "TLS 1.3: G->m: psk_or_ephemeral/all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -873,8 +868,7 @@ run_test "TLS 1.3: G->m: all/psk_or_ephemeral, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -918,8 +912,7 @@ run_test "TLS 1.3: G->m: psk_or_ephemeral/psk_or_ephemeral, fail, key materia -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_gnutls_tls1_3 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -1381,8 +1374,7 @@ run_test "TLS 1.3: O->m: ephemeral_all/ephemeral_all, fail, key material mism -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -1445,8 +1437,7 @@ run_test "TLS 1.3: O->m: all/ephemeral_all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -1512,8 +1503,7 @@ run_test "TLS 1.3: O->m: ephemeral_all/all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -1579,8 +1569,7 @@ run_test "TLS 1.3: O->m: all/all, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3 @@ -1645,8 +1634,7 @@ run_test "TLS 1.3: O->m: all/psk_or_ephemeral, fail, key material mismatch" \ -s "Invalid binder." \ -S "key exchange mode: psk$" \ -S "key exchange mode: psk_ephemeral" \ - -S "key exchange mode: ephemeral" \ - -s "! Certificate verification was skipped" + -S "key exchange mode: ephemeral" requires_openssl_tls1_3_with_compatible_ephemeral requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3