Skip to content

Commit 05f2699

Browse files
committed
[nrf fromtree] tests: net: socket: tls: Specify cipher suite to use
Specify what cipher suite to use for TLS/DTLS at runtime for consistent results. Otherwise, in case additional mbed TLS features are enabled (for instance with TFM enabled), different cipher suite may be chosen for TLS/DTLS by mbed TLS, affecting the tests outcome. Signed-off-by: Robert Lubos <robert.lubos@nordicsemi.no> (cherry picked from commit 9a2b669)
1 parent de6c192 commit 05f2699

1 file changed

Lines changed: 9 additions & 0 deletions

File tree

  • tests/net/socket/tls/src

tests/net/socket/tls/src/main.c

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -66,6 +66,9 @@ static void test_config_psk(int s_sock, int c_sock)
6666
sec_tag_t sec_tag_list[] = {
6767
PSK_TAG
6868
};
69+
const int cipher_list[] = {
70+
MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384,
71+
};
6972

7073
(void)tls_credential_delete(PSK_TAG, TLS_CREDENTIAL_PSK);
7174
(void)tls_credential_delete(PSK_TAG, TLS_CREDENTIAL_PSK_ID);
@@ -81,12 +84,18 @@ static void test_config_psk(int s_sock, int c_sock)
8184
zassert_equal(zsock_setsockopt(s_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_SEC_TAG_LIST,
8285
sec_tag_list, sizeof(sec_tag_list)),
8386
0, "Failed to set PSK on server socket");
87+
zassert_equal(zsock_setsockopt(s_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_CIPHERSUITE_LIST,
88+
cipher_list, sizeof(cipher_list)),
89+
0, "Failed to set ciphersuite list on server socket");
8490
}
8591

8692
if (c_sock >= 0) {
8793
zassert_equal(zsock_setsockopt(c_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_SEC_TAG_LIST,
8894
sec_tag_list, sizeof(sec_tag_list)),
8995
0, "Failed to set PSK on client socket");
96+
zassert_equal(zsock_setsockopt(c_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_CIPHERSUITE_LIST,
97+
cipher_list, sizeof(cipher_list)),
98+
0, "Failed to set ciphersuite list on client socket");
9099
}
91100
}
92101

0 commit comments

Comments
 (0)