From 24b03d8b72ba47b2a53635baf64554661a4d83f1 Mon Sep 17 00:00:00 2001 From: Gilles Peskine Date: Fri, 4 Oct 2024 16:22:24 +0200 Subject: [PATCH] Add ignore list for restartable ECDH in TLS TLS only supports actual restartable ECDH with the legacy code that's going away, not with the MBEDTLS_USE_PSA_CRYPTO code that's becoming the only variant. This leaves a few test cases that validate restartable ECDH in TLS as desirable, but not currently able to pass. Signed-off-by: Gilles Peskine --- tests/scripts/analyze_outcomes.py | 3 +++ 1 file changed, 3 insertions(+) diff --git a/tests/scripts/analyze_outcomes.py b/tests/scripts/analyze_outcomes.py index 75dc41d6f..0962cfe90 100755 --- a/tests/scripts/analyze_outcomes.py +++ b/tests/scripts/analyze_outcomes.py @@ -85,6 +85,9 @@ class CoverageTask(outcome_analysis.CoverageTask): # We don't run ssl-opt.sh with Valgrind on the CI because # it's extremely slow. We don't intend to change this. 'DTLS fragmenting: proxy MTU: auto-reduction (with valgrind)', + # TLS doesn't use restartable ECDH yet. + # https://github.com/Mbed-TLS/mbedtls/issues/7294 + re.compile(r'EC restart:.*no USE_PSA.*'), # It seems that we don't run `ssl-opt.sh` with # `MBEDTLS_USE_PSA_CRYPTO` enabled but `MBEDTLS_SSL_ASYNC_PRIVATE` # disabled.