Remove all TLS 1.0 and 1.1 instances and add some compatibility tests
Signed-off-by: TRodziewicz <tomasz.rodziewicz@mobica.com>
diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index c8e4985..559cb4c 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -4667,6 +4667,67 @@
-s "Protocol is TLSv1.2" \
-c "Protocol is TLSv1.2"
+run_test "Not supported version check: cli TLS 1.0" \
+ "$P_SRV" \
+ "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.0" \
+ 1 \
+ -s "Handshake protocol not within min/max boundaries" \
+ -c "Error in protocol version" \
+ -S "Protocol is TLSv1.0" \
+ -C "Handshake was completed"
+
+run_test "Not supported version check: cli TLS 1.1" \
+ "$P_SRV" \
+ "$G_CLI localhost --priority=NORMAL:-VERS-ALL:+VERS-TLS1.1" \
+ 1 \
+ -s "Handshake protocol not within min/max boundaries" \
+ -c "Error in protocol version" \
+ -S "Protocol is TLSv1.1" \
+ -C "Handshake was completed"
+
+run_test "Not supported version check: srv max TLS 1.0" \
+ "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.0" \
+ "$P_CLI" \
+ 1 \
+ -s "Error in protocol version" \
+ -c "Handshake protocol not within min/max boundaries" \
+ -S "Version: TLS1.0" \
+ -C "Protocol is TLSv1.0"
+
+run_test "Not supported version check: srv max TLS 1.1" \
+ "$G_SRV --priority=NORMAL:-VERS-TLS-ALL:+VERS-TLS1.1" \
+ "$P_CLI" \
+ 1 \
+ -s "Error in protocol version" \
+ -c "Handshake protocol not within min/max boundaries" \
+ -S "Version: TLS1.1" \
+ -C "Protocol is TLSv1.1"
+
+## ClientHello generated with
+## "openssl s_client -CAfile tests/data_files/test-ca.crt -tls1_1 -connect localhost:4433 -cipher ..."
+## then manually twiddling the ciphersuite list.
+## The ClientHello content is spelled out below as a hex string as
+## "prefix ciphersuite1 ciphersuite2 ciphersuite3 ciphersuite4 suffix".
+## The expected response is an inappropriate_fallback alert.
+
+requires_openssl_with_fallback_scsv
+run_test "Fallback SCSV: beginning of list" \
+ "$P_SRV debug_level=2" \
+ "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 5600 0031 0032 0033 0100000900230000000f000101' '15030200020246'" \
+ 0 \
+ -s "client only supports ssl smaller than minimum" \
+ -S "received FALLBACK_SCSV" \
+ -S "inapropriate fallback"
+
+requires_openssl_with_fallback_scsv
+run_test "Fallback SCSV: end of list" \
+ "$P_SRV debug_level=2" \
+ "$TCP_CLIENT localhost $SRV_PORT '160301003e0100003a03022aafb94308dc22ca1086c65acc00e414384d76b61ecab37df1633b1ae1034dbe000008 0031 0032 0033 5600 0100000900230000000f000101' '15030200020246'" \
+ 0 \
+ -s "client only supports ssl smaller than minimum" \
+ -S "received FALLBACK_SCSV" \
+ -S "inapropriate fallback"
+
# Tests for ALPN extension
run_test "ALPN: none" \