1874937 - Update BoGo and enable Kyber tests

Status: RESOLVED FIXED

(NSS :: Test, task, P3)

Comment 1

[John Schanck [:jschanck]]

Attachment: Bug 1874937 - bogo: adjust expectation for a key usage bit test. r=#nss-reviewers

BoringSSL revision cee2dbb0 changes the default expectation for tests
that check the Key Usage bits of RSA server certificates in TLS 1.2.

See also: https://boringssl-review.googlesource.com/c/boringssl/+/58805

Depends on D199121

Comment 2

[John Schanck [:jschanck]]

Attachment: Bug 1874937 - bogo: add support for the -curves shim flag and update Kyber expectations. r=#nss-reviewers

BoringSSL revision 7b935937 added a "-curves" flag for configuring supported
named groups on the shim.

See also:

• https://boringssl-review.googlesource.com/c/boringssl/+/33105
• https://boringssl-review.googlesource.com/c/boringssl/+/59325

Depends on D199122

Comment 3

[John Schanck [:jschanck]]

Attachment: Bug 1874937 - bogo: add support for the -ipv6 and -shim-id shim flags. r=#nss-reviewers

BoringSSL revision e33257fa adds an "-ipv6" shim flag to indicate whether the
shim should connect using IPv6 or IPv4. Revision 50ee0955 changes the shim <->
runner protocol to avoid port exhaustion. The runner uses a single port, rather
than one per test, and the shim receives a "-shim-id" argument that it writes
back to the runner after establishing a TCP connection.

See also:

• https://boringssl-review.googlesource.com/c/boringssl/+/60885
• https://boringssl-review.googlesource.com/c/boringssl/+/60888

Depends on D199123

Comment 4

[John Schanck [:jschanck]]

https://hg.mozilla.org/projects/nss/rev/5bf52175f1efdf70902168c807875c4fe6066530
https://hg.mozilla.org/projects/nss/rev/a67223a53fc764d96c7e146d488ee30b5d7aefb4
https://hg.mozilla.org/projects/nss/rev/7235d7750044c99b719aa200e44aff76a7b45ead