Skip to content

Commit

Permalink
RFC 8422 5.1.1 deprecates curves 1..22 (the indexes are defined in RF…
Browse files Browse the repository at this point in the history
…C 4492 5.1.1),

so SECP192r1 was completely removed from Tempesta TLS and certificates can not
be loaded any more.
  • Loading branch information
krizhanovsky committed Oct 20, 2019
1 parent 9567274 commit 86f12f5
Showing 1 changed file with 3 additions and 2 deletions.
5 changes: 3 additions & 2 deletions tls/test_tls_cert.py
Original file line number Diff line number Diff line change
Expand Up @@ -204,7 +204,7 @@ def setUp(self):
self.cgen = CertGenerator()
self.cgen.key = {
'alg': 'ecdsa',
'curve': ec.SECP192R1() # Unsupported curve
'curve': ec.SECP192R1() # Deprecated curve, RFC 8422 5.1.1
}
self.cgen.sign_alg = 'sha256'
self.cgen.generate()
Expand All @@ -215,7 +215,8 @@ def setUp(self):
tester.TempestaTest.setUp(self)

def test(self):
self.check_bad_alg("Warning: None of the common ciphersuites is usable")
self.check_cannot_start("ERROR: tls_certificate: "
+ "Invalid certificate specified")


class ECDSA_SHA256_SECP256(X509):
Expand Down

0 comments on commit 86f12f5

Please sign in to comment.