THRIFT-4084: Add a SSL/TLS negotiation check to crossfeature to verify SSLv3 is not active and that at least one of TLSv1.0 through 1.2 are accepted.
Client: csharp, d, go, nodejs, perl
This closes #1197
diff --git a/test/tests.json b/test/tests.json
index e228928..f1d6a47 100644
--- a/test/tests.json
+++ b/test/tests.json
@@ -121,8 +121,8 @@
"framed:fastframed"
],
"sockets": [
- "ip-ssl",
- "ip"
+ "ip",
+ "ip-ssl"
],
"protocols": [
"compact",
@@ -415,7 +415,7 @@
"-I../../lib/perl/lib/",
"TestClient.pl",
"--ca=../keys/CA.pem",
- "--cert=../keys/client.pem",
+ "--cert=../keys/client.crt",
"--key=../keys/client.key"
]
},
@@ -425,8 +425,7 @@
"-Igen-perl/",
"-I../../lib/perl/lib/",
"TestServer.pl",
- "--ca=../keys/CA.pem",
- "--cert=../keys/server.pem",
+ "--cert=../keys/server.crt",
"--key=../keys/server.key"
]
},