commit f4a88296fc272dc3e41e3966fa36084960a9fb7f
author David Benjamin <davidben@google.com> Tue Jan 12 16:49:49 2021 -0500
committer Adam Langley <agl@google.com> Wed Jan 13 18:34:35 2021 +0000
tree b183b46f23797098507900dd0af0d195f1543a16
parent 41676bfd86edd39a51f2b893cfe450dfcdb45964

runner: Allow tokbind without RI/EMS in TLS 1.3.

There was a QUIC-specific ALPS bug, so I'm thinking we should loop
addExtensionTests at all protocols. To do so, we need to fix this bug in
the test expectation.

Change-Id: Ic05a4cb2ea32e7145441a0273cd65966c41534ec
Reviewed-on: https://boringssl-review.googlesource.com/c/boringssl/+/44986
Reviewed-by: Adam Langley <agl@google.com>

ssl/test/runner/handshake_server.go

diff --git a/ssl/test/runner/handshake_server.go b/ssl/test/runner/handshake_server.go
index e1bc2e8..df74ccd 100644
--- a/ssl/test/runner/handshake_server.go
+++ b/ssl/test/runner/handshake_server.go
@@ -1475,7 +1475,7 @@
 		serverExtensions.tokenBindingVersion = config.TokenBindingVersion
 	}
 
-	if len(hs.clientHello.tokenBindingParams) > 0 && (!hs.clientHello.extendedMasterSecret || hs.clientHello.secureRenegotiation == nil) {
+	if c.vers < VersionTLS13 && len(hs.clientHello.tokenBindingParams) > 0 && (!hs.clientHello.extendedMasterSecret || hs.clientHello.secureRenegotiation == nil) {
 		return errors.New("client sent Token Binding without EMS and/or RI")
 	}