deps: cherry-pick akamai/openssl/commit/a5a08cb8050bb69120e833456e355f482e392456

Original Commit Message:

  Test KeyUpdate rejection

  For now, just test that we don't generate any, since we don't really
  expose the mechanics for encrypting one and the QUIC API is not
  integrated into the TLSProxy setup.

PR-URL: https://github.com/nodejs/node/pull/34033
Reviewed-By: Anna Henningsen <anna@addaleax.net>
Reviewed-By: Jiawen Geng <technicalcute@gmail.com>
Reviewed-By: Daniel Bevenius <daniel.bevenius@gmail.com>
This commit is contained in:
Benjamin Kaduk authored and James M Snell committed 2020-06-24 12:33:03 -07:00
1 parent bad1a150ea
commit c3d85b7637
1 file changed
+11
+11
View File
@@ -6591,6 +6591,17 @@ static int test_quic_api(void)
|| !TEST_true(SSL_process_quic_post_handshake(clientssl)))
goto end;
/* Dummy handshake call should succeed */
if (!TEST_true(SSL_do_handshake(clientssl)))
goto end;
/* Test that we (correctly) fail to send KeyUpdate */
if (!TEST_true(SSL_key_update(clientssl, SSL_KEY_UPDATE_NOT_REQUESTED))
|| !TEST_int_le(SSL_do_handshake(clientssl), 0))
goto end;
if (!TEST_true(SSL_key_update(serverssl, SSL_KEY_UPDATE_NOT_REQUESTED))
|| !TEST_int_le(SSL_do_handshake(serverssl), 0))
goto end;
testresult = 1;
end: