mirror of
https://github.com/vmware-tanzu/pinniped.git
synced 2026-07-20 23:12:40 +00:00
@@ -32,8 +32,8 @@ func secureCipherSuiteIDs() []uint16 {
|
||||
|
||||
// These are considered "insecure" by Go because they are returned by tls.InsecureCipherSuites().
|
||||
// So although they are included in Go's src/crypto/tls/defaults_fips140.go, they will not actually be used.
|
||||
//tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
|
||||
//tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
|
||||
// tls.TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,
|
||||
// tls.TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256,
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
@@ -1544,7 +1544,6 @@ func TestImpersonationProxy(t *testing.T) { //nolint:gocyclo // yeah, it's compl
|
||||
require.Empty(t, stderr)
|
||||
expectedCiphers := testlib.GetExpectedCiphers(ptls.Default(nil), testlib.DefaultCipherSuitePreference())
|
||||
require.Contains(t, stdout, expectedCiphers, "wantedToContain:\n%s\nactual stdout:\n%s", expectedCiphers, stdout)
|
||||
|
||||
})
|
||||
})
|
||||
|
||||
|
||||
@@ -53,8 +53,11 @@ func TestFIPSCipherSuites_Parallel(t *testing.T) {
|
||||
// tls config of the client without explicitly set ciphers
|
||||
// is the same as the tls config of the test server with explicitly
|
||||
// set ciphers from ptls.
|
||||
request, _ := http.NewRequest("GET", server.URL, nil)
|
||||
request, _ := http.NewRequestWithContext(t.Context(), "GET", server.URL, nil)
|
||||
response, err := transport.RoundTrip(request)
|
||||
t.Cleanup(func() {
|
||||
require.NoError(t, response.Body.Close())
|
||||
})
|
||||
require.NoError(t, err)
|
||||
require.Equal(t, http.StatusOK, response.StatusCode)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user