commit ca6554b133201b80517985d5b43b5c767ab9d4ad
author David Benjamin <davidben@chromium.org> Sat Nov 08 12:31:52 2014 -0500
committer Adam Langley <agl@google.com> Tue Nov 11 00:00:49 2014 +0000
tree a0ddcf96cef80ccb0fcd891293af0da257fa1b17
parent 9114fae39e86c067d5451a4e23730fc0a7f2de58

Add tests for client-initiated renegotiation.

These'll get removed once most of renego support is gone, but this is to prove
removing the warning alert from the previous commit still prevents legacy
renegotiations.

Change-Id: I7d9d95e1d4c5d23d3b6d170938a5499a65f2d5ea
Reviewed-on: https://boringssl-review.googlesource.com/2236
Reviewed-by: Adam Langley <agl@google.com>

ssl/test/test_config.cc

diff --git a/ssl/test/test_config.cc b/ssl/test/test_config.cc
index b717bd3..ebd5e4e 100644
--- a/ssl/test/test_config.cc
+++ b/ssl/test/test_config.cc
@@ -60,6 +60,8 @@
   { "-expect-extended-master-secret",
     &TestConfig::expect_extended_master_secret },
   { "-renegotiate", &TestConfig::renegotiate },
+  { "-allow-unsafe-legacy-renegotiation",
+    &TestConfig::allow_unsafe_legacy_renegotiation },
 };
 
 const size_t kNumBoolFlags = sizeof(kBoolFlags) / sizeof(kBoolFlags[0]);
@@ -112,7 +114,8 @@
       tls_d5_bug(false),
       expect_session_miss(false),
       expect_extended_master_secret(false),
-      renegotiate(false) {
+      renegotiate(false),
+      allow_unsafe_legacy_renegotiation(false) {
 }
 
 bool ParseConfig(int argc, char **argv, TestConfig *out_config) {