commit 3a584aecca23de40129d0596a3b0409f135d904a
author Gilles Peskine <Gilles.Peskine@arm.com> Sun Apr 12 23:15:51 2020 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> Mon Apr 20 15:39:36 2020 +0200
tree 571dcbc7585dfe6f67bbd0ea4bdaa30d51c7f055
parent be1d609c19d97843f8212132c1a2b22337ceee68

Enable SSLv3 in the full config

It's deprecated, but not otherwise counter-indicated for the full
config: it doesn't conflict with anything and enabling it doesn't make
testing harder (especially since it defaults off in compat.sh).

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>

scripts/config.py

diff --git a/scripts/config.py b/scripts/config.py
index 62891ce..aeba64f 100755
--- a/scripts/config.py
+++ b/scripts/config.py
@@ -193,8 +193,6 @@
     'MBEDTLS_RSA_NO_CRT', # variant toggle
     'MBEDTLS_SHA512_NO_SHA384', # removes a feature
     'MBEDTLS_SSL_HW_RECORD_ACCEL', # build dependency (hook functions)
-    'MBEDTLS_SSL_PROTO_SSL3',
-    'MBEDTLS_SSL_SRV_SUPPORT_SSLV2_CLIENT_HELLO',
     'MBEDTLS_TEST_NULL_ENTROPY', # removes a feature
     'MBEDTLS_X509_ALLOW_UNSUPPORTED_CRITICAL_EXTENSION', # variant toggle
     'MBEDTLS_ZLIB_SUPPORT', # build dependency (libz)

tests/scripts/basic-build-test.sh

diff --git a/tests/scripts/basic-build-test.sh b/tests/scripts/basic-build-test.sh
index 5080c57..08c1410 100755
--- a/tests/scripts/basic-build-test.sh
+++ b/tests/scripts/basic-build-test.sh
@@ -68,9 +68,6 @@
 make clean
 cp "$CONFIG_H" "$CONFIG_BAK"
 scripts/config.py full
-# Enable some deprecated features that are not in the
-# full config, but are compatible with it and have tests.
-scripts/config.py set MBEDTLS_SSL_PROTO_SSL3
 make -j