From: Laszlo Boszormenyi (GCS) <gcs@debian.org>
Date: Tue, 26 Apr 2022 15:14:22 +0000 (+0100)
Subject: Disable TLS v1.0 and TLS v1.1 connection tests
X-Git-Tag: archive/raspbian/0.16.0-4+rpi1^2~12
X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=edda2886ea82e79e3a16f6341211e19551e40ef1;p=thrift.git

Disable TLS v1.0 and TLS v1.1 connection tests

Bug-Debian: https://bugs.debian.org/859128
Last-Update: 2021-09-26

TLS v1.0 and TLS v1.1 protocols are disabled as of OpenSSL 1.1.0f-4, see:
https://packages.qa.debian.org/o/openssl/news/20170806T233554Z.html

Gbp-Pq: Name disable_TLSv1_0_and_TLSv1_1.patch
---

diff --git a/lib/cpp/test/SecurityTest.cpp b/lib/cpp/test/SecurityTest.cpp
index cba8768..fe2934b 100644
--- a/lib/cpp/test/SecurityTest.cpp
+++ b/lib/cpp/test/SecurityTest.cpp
@@ -224,11 +224,11 @@ BOOST_AUTO_TEST_CASE(ssl_security_matrix)
         {
     //   server    = SSLTLS   SSLv2    SSLv3    TLSv1_0  TLSv1_1  TLSv1_2
     // client
-    /* SSLTLS  */  { true,    false,   false,   true,    true,    true    },
+    /* SSLTLS  */  { true,    false,   false,   false,   false,   true    },
     /* SSLv2   */  { false,   false,   false,   false,   false,   false   },
     /* SSLv3   */  { false,   false,   true,    false,   false,   false   },
-    /* TLSv1_0 */  { true,    false,   false,   true,    false,   false   },
-    /* TLSv1_1 */  { true,    false,   false,   false,   true,    false   },
+    /* TLSv1_0 */  { false,   false,   false,   true,    false,   false   },
+    /* TLSv1_1 */  { false,   false,   false,   false,   true,    false   },
     /* TLSv1_2 */  { true,    false,   false,   false,   false,   true    }
         };