commit 292cd6f4e560f3e3124bddada7ba232111783b46
author Gilles Peskine <Gilles.Peskine@arm.com> Thu Jan 26 20:50:08 2023 +0100
committer Gilles Peskine <Gilles.Peskine@arm.com> Thu Jan 26 21:44:26 2023 +0100
tree 85a162c51b01abeeb81719986eeb52c5a734ea94
parent 60f8eaa3b40964e3dfd1146efa0ed8049f61fdbb

Don't use the cipher suite in check_openssl_server_bug

We can detect PSK based on $TYPE. This allows more flexibility in how cipher
suites are spelled.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

tests/compat.sh

diff --git a/tests/compat.sh b/tests/compat.sh
index 2a93efc..3f9070e 100755
--- a/tests/compat.sh
+++ b/tests/compat.sh
@@ -205,7 +205,7 @@
 check_openssl_server_bug()
 {
     if test "X$VERIFY" = "XYES" && is_dtls "$MODE" && \
-        echo "$1" | grep "^TLS_PSK" >/dev/null;
+        test "$TYPE" = "PSK";
     then
         SKIP_NEXT="YES"
     fi
@@ -1029,7 +1029,7 @@
                     if [ "X" != "X$M_CIPHERS" ]; then
                         start_server "OpenSSL"
                         for i in $M_CIPHERS; do
-                            check_openssl_server_bug $i
+                            check_openssl_server_bug
                             run_client mbedTLS $i
                         done
                         stop_server