summaryrefslogtreecommitdiff
path: root/TAO/orbsvcs/tests/Security/Null_Cipher/README
blob: f46027e282c37b0b6d94d9a9696a81e9d2dc4846 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
$Id$

This test verifies that a NULL cipher may be used. Sometime between
openssl release 0.9.7a and 0.9.8g, openssl changed the way it evaluated
cipher strings so that "DEFAULT:eNULL" no longer allowed use of a NULL
cipher. The correction is to have the SSLIOP Factory use "ALL:eNULL" as
the cipher string when -SSLNoProtection is used on the server side.

The test is a simple invocation, with qop and trust policies set to
force the use of a NULL cipher.

A failure is indicated by the server reporting an ssl handshake error.
A success is a silent termination of client and server.