commit e61d0e9f7c2d99751581716437b8128c7aea66d5
author Minos Galanakis <minos.galanakis@arm.com> Wed Mar 12 01:07:58 2025 +0000
committer Minos Galanakis <minos.galanakis@arm.com> Fri Mar 14 00:10:13 2025 +0000
tree 4d571b4c35166d6caa284e273d6e6b9d427f1a3c
parent 27988889e572e8c8596de8c70b344dad2333cc59

ssl-opt: Added client-initiated server-rejected renegotation test.

Signed-off-by: Minos Galanakis <minos.galanakis@arm.com>

tests/ssl-opt.sh

diff --git a/tests/ssl-opt.sh b/tests/ssl-opt.sh
index 7d46ed3..d168d09 100755
--- a/tests/ssl-opt.sh
+++ b/tests/ssl-opt.sh
@@ -14556,6 +14556,20 @@
             -s "Prepare: waiting for more handshake fragments 4/" \
             -s "Consume: waiting for more handshake fragments 4/" \
 
+requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
+requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_3
+requires_config_enabled MBEDTLS_SSL_RENEGOTIATION
+run_test    "Handshake defragmentation on server: len=4, client-initiated server-rejected renegotation" \
+            "$P_SRV debug_level=4 exchanges=2 renegotiation=0 auth_mode=required" \
+            "$O_NEXT_CLI_RENEGOTIATE -tls1_2 -split_send_frag 4 -connect 127.0.0.1:+$SRV_PORT" \
+            1 \
+            -s "received TLS_EMPTY_RENEGOTIATION_INFO" \
+            -s "refusing renegotiation, sending alert" \
+            -s "server hello, secure renegotiation extension" \
+            -s "initial handshake fragment: 4, 0\\.\\.4 of [0-9]\\+" \
+            -s "Prepare: waiting for more handshake fragments 4/" \
+            -s "Consume: waiting for more handshake fragments 4/" \
+
 # Test server-initiated renegotiation with fragmented handshake on TLS1.2
 requires_config_enabled MBEDTLS_SSL_PROTO_TLS1_2
 requires_config_enabled MBEDTLS_SSL_RENEGOTIATION