1667000 - Update tlsfuzzer in CI and enable more tests

Status: NEW

(NSS :: Test, task, P3)

Description

[Daiki Ueno [:ueno]]

The tlsfuzzer module used in the CI hasn't been updated since Sept 2019, and only a subset of TLS 1.3 tests (+ tests that cover specific bugs) are enabled. On the other hand, in tlsfuzzer several improvements were added to the harness to make the CI integration easier:
https://tlsfuzzer.readthedocs.io/en/latest/ci-integration.html

It would be good to review the current integration and enable more tests.

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1667000: respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py r?#nss-reviewers

We recently updated tlsfuzzer so that we could enable a test for Bug 1662515.
Since that update we've been seeing intermittent failures for
tlsfuzzer/test-tls13-signature-algorithms.py, which is a bit surprising as
our config labels this test as "exp_pass: false". This patch aligns our
selfserv configuration for the tls13-sig-algs test with the requirements of
the test, and should fix the issue, but there are clearly some other
underlying problems here.

Comment 2

[BugBot [:suhaib / :marco/ :calixte]]

Clear a needinfo that is pending on an inactive user.

Inactive users most likely will not respond; if the missing information is essential and cannot be collected another way, the bug maybe should be closed as INCOMPLETE.

For more information, please visit BugBot documentation.

Comment 3

[Takanori MATSUURA]

Fixed by the changeset below?
https://hg.mozilla.org/projects/nss/rev/7e7070e56bf7a3937cd9338a52573c896af07e3f