1667000 - Update tlsfuzzer in CI and enable more tests

Status: NEW

(NSS :: Test, task, P3)

Description

[Daiki Ueno [:ueno]]

The tlsfuzzer module used in the CI hasn't been updated since Sept 2019, and only a subset of TLS 1.3 tests (+ tests that cover specific bugs) are enabled. On the other hand, in tlsfuzzer several improvements were added to the harness to make the CI integration easier:
https://tlsfuzzer.readthedocs.io/en/latest/ci-integration.html

It would be good to review the current integration and enable more tests.

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1667000: respect server requirements of tlsfuzzer/test-tls13-signature-algorithms.py r?#nss-reviewers

We recently updated tlsfuzzer so that we could enable a test for Bug 1662515.
Since that update we've been seeing intermittent failures for
tlsfuzzer/test-tls13-signature-algorithms.py, which is a bit surprising as
our config labels this test as "exp_pass: false". This patch aligns our
selfserv configuration for the tls13-sig-algs test with the requirements of
the test, and should fix the issue, but there are clearly some other
underlying problems here.