Testsuite: Avoid requesting TLS cert-status requests from GnuTLS test utility unless...

diff --git a/test/runtest b/test/runtest
index 1cf6aadfa72ae2659d9a2bec48ea02f0ae7e7f93..fcc7a972e20cb7510761e75ea5a0f2fdab479ed7 100755 (executable)
--- a/test/runtest
+++ b/test/runtest
@@ -773,9 +773,6 @@ RESET_AFTER_EXTRA_LINE_READ:
 
   s/(TLS error on connection (?:from .* )?\(SSL_\w+\): error:)(.*)/$1 <<detail omitted>>/;
 
-  # ======== GnuTLS problems ========
-  next if /OCSP unusable with this GnuTLS library version/;
-
   # ======== Maildir things ========
   # timestamp output in maildir processing
   s/(timestamp=|\(timestamp_only\): )\d+/$1ddddddd/g;

diff --git a/test/scripts/5650-OCSP-GnuTLS/5650 b/test/scripts/5650-OCSP-GnuTLS/5650
index 9ebafb3e264a5b44af6777b166416a69f9137c49..343d6af2f1cbd200fd0a2f18a2170e7784ca0ae4 100644 (file)
--- a/test/scripts/5650-OCSP-GnuTLS/5650
+++ b/test/scripts/5650-OCSP-GnuTLS/5650
@@ -94,8 +94,7 @@ exim -bd -oX PORT_D -DSERVER=server \
 # Temporarily (I hope) use OpenSSL-based client, as GnuTLS is buggy and always requests (and understands)
 # stapling
 #
-#client-gnutls \
-client-ssl \
+client-gnutls \
  HOSTIPV4 PORT_D aux-fixed/cert2 aux-fixed/cert2
 ??? 220
 ehlo rhu.barb

diff --git a/test/src/client.c b/test/src/client.c
index 251f58696a4405eb4ac77d9f77789a1c620f68bd..dd7df5bd69bfed40db6430cf7afbdc6411424905 100644 (file)
--- a/test/src/client.c
+++ b/test/src/client.c
@@ -84,6 +84,9 @@ latter needs a whole pile of tables. */
 # if GNUTLS_VERSION_NUMBER >= 0x030103
 #  define HAVE_OCSP
 #  include <gnutls/ocsp.h>
+#  ifndef GNUTLS_NO_EXTENSIONS
+#   define GNUTLS_NO_EXTENSIONS 0
+#  endif
 # endif
 
 # define DH_BITS      768
@@ -451,7 +454,7 @@ tls_session_init(void)
 {
 gnutls_session session;
 
-gnutls_init(&session, GNUTLS_CLIENT);
+gnutls_init(&session, GNUTLS_CLIENT | GNUTLS_NO_EXTENSIONS);
 
 gnutls_cipher_set_priority(session, default_cipher_priority);
 gnutls_compression_set_priority(session, comp_priority);