From: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Date: Mon, 26 Oct 2020 17:01:44 +0000 (+0000)
Subject: Disable TLS v1.0 and TLS v1.1 connection tests
X-Git-Tag: archive/raspbian/0.13.0-6+rpi1~1^2~11
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=71a9d87cba7f15021160b01de882baaeefabc9fb;p=thrift.git

Disable TLS v1.0 and TLS v1.1 connection tests

Bug-Debian: https://bugs.debian.org/859128
Last-Update: 2017-09-10

TLS v1.0 and TLS v1.1 protocols are disabled as of OpenSSL 1.1.0f-4, see:
https://packages.qa.debian.org/o/openssl/news/20170806T233554Z.html

Gbp-Pq: Name disable_TLSv1_0_and_TLSv1_1.patch
---

diff --git a/lib/cpp/test/SecurityTest.cpp b/lib/cpp/test/SecurityTest.cpp
index 982a4f3..7b0e2b9 100644
--- a/lib/cpp/test/SecurityTest.cpp
+++ b/lib/cpp/test/SecurityTest.cpp
@@ -223,11 +223,11 @@ BOOST_AUTO_TEST_CASE(ssl_security_matrix)
         {
     //   server    = SSLTLS   SSLv2    SSLv3    TLSv1_0  TLSv1_1  TLSv1_2
     // client
-    /* SSLTLS  */  { true,    false,   false,   true,    true,    true    },
+    /* SSLTLS  */  { true,    false,   false,   false,   false,   true    },
     /* SSLv2   */  { false,   false,   false,   false,   false,   false   },
     /* SSLv3   */  { false,   false,   true,    false,   false,   false   },
-    /* TLSv1_0 */  { true,    false,   false,   true,    false,   false   },
-    /* TLSv1_1 */  { true,    false,   false,   false,   true,    false   },
+    /* TLSv1_0 */  { false,   false,   false,   true,    false,   false   },
+    /* TLSv1_1 */  { false,   false,   false,   false,   true,    false   },
     /* TLSv1_2 */  { true,    false,   false,   false,   false,   true    }
         };