Method TestTLSVersions

security/advancedtls/advancedtls_integration_test.go:802–942

(t *testing.T)

}

func (s) TestTLSVersions(t *testing.T) {
	cs := &testutils.CertStore{}
	if err := cs.LoadCerts(); err != nil {
		t.Fatalf("cs.LoadCerts() failed, err: %v", err)
	}
	for _, test := range []struct {
		desc             string
		expectError      bool
		clientMinVersion uint16
		clientMaxVersion uint16
		serverMinVersion uint16
		serverMaxVersion uint16
	}{
		// Client side sets TLS version that is higher than required from the server side.
		{
			desc:             "Client TLS version higher than server",
			clientMinVersion: tls.VersionTLS13,
			clientMaxVersion: tls.VersionTLS13,
			serverMinVersion: tls.VersionTLS12,
			serverMaxVersion: tls.VersionTLS12,
			expectError:      true,
		},
		// Server side sets TLS version that is higher than required from the client side.
		{
			desc:             "Server TLS version higher than client",
			clientMinVersion: tls.VersionTLS12,
			clientMaxVersion: tls.VersionTLS12,
			serverMinVersion: tls.VersionTLS13,
			serverMaxVersion: tls.VersionTLS13,
			expectError:      true,
		},
		// Client and server set proper TLS versions.
		{
			desc:             "Good TLS version settings",
			clientMinVersion: tls.VersionTLS12,
			clientMaxVersion: tls.VersionTLS13,
			serverMinVersion: tls.VersionTLS12,
			serverMaxVersion: tls.VersionTLS13,
			expectError:      false,
		},
		{
			desc:             "Client 1.2 - 1.3 and server 1.2",
			clientMinVersion: tls.VersionTLS12,
			clientMaxVersion: tls.VersionTLS13,
			serverMinVersion: tls.VersionTLS12,
			serverMaxVersion: tls.VersionTLS12,
			expectError:      false,
		},
		{
			desc:             "Client 1.2 - 1.3 and server 1.1 - 1.2",
			clientMinVersion: tls.VersionTLS12,
			clientMaxVersion: tls.VersionTLS13,
			serverMinVersion: tls.VersionTLS11,
			serverMaxVersion: tls.VersionTLS12,
			expectError:      false,
		},
		{
			desc:             "Client 1.2 - 1.3 and server 1.3",