From 52d8701b99b4eb3fc8edce14d73eb3691d330cf2 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Mon, 3 Mar 2025 16:21:06 +0100 Subject: [PATCH] Don't skip defragmentation test cases wih length < 16 Require the bug with defragmentation of encrypted handshake messages to be fixed. Signed-off-by: Gilles Peskine --- scripts/generate_tls_handshake_tests.py | 11 ----------- 1 file changed, 11 deletions(-) diff --git a/scripts/generate_tls_handshake_tests.py b/scripts/generate_tls_handshake_tests.py index 6ab7367fe..17ec13893 100755 --- a/scripts/generate_tls_handshake_tests.py +++ b/scripts/generate_tls_handshake_tests.py @@ -56,17 +56,6 @@ def write_tls_handshake_defragmentation_test( description = f'Handshake defragmentation on {side.name.lower()}: {description}' tc = tls_test_case.TestCase(description) - if version == Version.TLS12 and \ - length is not None and \ - length >= TLS_HANDSHAKE_FRAGMENT_MIN_LENGTH and \ - length < 16 and \ - side == side.CLIENT: - # Skip test cases where the Finished message is fragmented in TLS 1.2. - # This is currently buggy when the symmetric encryption used an - # explicit IV (CBC, GCM or CCM; Chachapoly and null work, as does - # TLS 1.3, because they use a purely implicit IV). - tc.requirements.append('skip_next_test') - if version is not None: their_args += ' ' + version.openssl_option() # Emit a version requirement, because we're forcing the version via