Skip to content

[nrf fromtree] tests: net: socket: tls: Improve tests interoperability #4028

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
rlubos merged 2 commits into from
May 5, 2026
Merged

[nrf fromtree] tests: net: socket: tls: Improve tests interoperability #4028

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
9771a51
[nrf fromtree] tests: net: socket: tls: Optimize mbed TLS configuration
rlubos Apr 28, 2026
04b2fd7
[nrf fromtree] tests: net: socket: tls: Specify cipher suite to use
rlubos Apr 28, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion tests/net/socket/tls/prj.conf
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -52,4 +52,9 @@ CONFIG_MBEDTLS_HEAP_SIZE=30000
CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID=y
CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT=32
CONFIG_MBEDTLS_CIPHERSUITE_TLS_PSK_WITH_AES_256_CBC_SHA384=y
CONFIG_MBEDTLS_CIPHERSUITE_TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256=y

# For tests verifying certificate validation
CONFIG_MBEDTLS_X509_CRT_PARSE_C=y
CONFIG_PSA_WANT_KEY_TYPE_RSA_PUBLIC_KEY=y
CONFIG_PSA_WANT_KEY_TYPE_RSA_KEY_PAIR_IMPORT=y
CONFIG_PSA_WANT_ALG_RSA_PKCS1V15_SIGN=y
9 changes: 9 additions & 0 deletions tests/net/socket/tls/src/main.c
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -66,6 +66,9 @@
sec_tag_t sec_tag_list[] = {
PSK_TAG
};
const int cipher_list[] = {
MBEDTLS_TLS_PSK_WITH_AES_256_CBC_SHA384,
};

(void)tls_credential_delete(PSK_TAG, TLS_CREDENTIAL_PSK);
(void)tls_credential_delete(PSK_TAG, TLS_CREDENTIAL_PSK_ID);
Expand All @@ -81,12 +84,18 @@
zassert_equal(zsock_setsockopt(s_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_SEC_TAG_LIST,
sec_tag_list, sizeof(sec_tag_list)),
0, "Failed to set PSK on server socket");
zassert_equal(zsock_setsockopt(s_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_CIPHERSUITE_LIST,
cipher_list, sizeof(cipher_list)),
0, "Failed to set ciphersuite list on server socket");

Check notice on line 89 in tests/net/socket/tls/src/main.c

View workflow job for this annotation

GitHub Actions / Run compliance checks on patch series (PR)

You may want to run clang-format on this change 

tests/net/socket/tls/src/main.c:89 
-					 cipher_list, sizeof(cipher_list)),
+					       cipher_list, sizeof(cipher_list)),

See https://docs.zephyrproject.org/latest/contribute/guidelines.html#clang-format for more details.
}

if (c_sock >= 0) {
zassert_equal(zsock_setsockopt(c_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_SEC_TAG_LIST,
sec_tag_list, sizeof(sec_tag_list)),
0, "Failed to set PSK on client socket");
zassert_equal(zsock_setsockopt(c_sock, ZSOCK_SOL_TLS, ZSOCK_TLS_CIPHERSUITE_LIST,
cipher_list, sizeof(cipher_list)),
0, "Failed to set ciphersuite list on client socket");

Check notice on line 98 in tests/net/socket/tls/src/main.c

View workflow job for this annotation

GitHub Actions / Run compliance checks on patch series (PR)

You may want to run clang-format on this change 

tests/net/socket/tls/src/main.c:98 
-					 cipher_list, sizeof(cipher_list)),
+					       cipher_list, sizeof(cipher_list)),

See https://docs.zephyrproject.org/latest/contribute/guidelines.html#clang-format for more details.
}
}

Expand Down
Loading