explicit policy

aws · Nov 27, 2024 · f5f1036 · f5f1036
1 parent 513b8c7
commit f5f1036
Showing 1 changed file with 5 additions and 1 deletion.
diff --git a/tests/unit/s2n_client_supported_groups_extension_test.c b/tests/unit/s2n_client_supported_groups_extension_test.c
@@ -260,10 +260,14 @@ int main()
 
             for (size_t i = 0; i < NUM_MISMATCH_PQ_TEST_POLICY_OVERRIDES; i++) {
                 EXPECT_SUCCESS(s2n_enable_tls13_in_test());
+
                 DEFER_CLEANUP(struct s2n_config *config = s2n_config_new(),
                         s2n_config_ptr_free);
                 EXPECT_NOT_NULL(config);
-                EXPECT_SUCCESS(s2n_config_set_cipher_preferences(config, "default_tls13"));
+                /* Since these tests are directly setting security_policy_override, set a
+                 * s2n_config that doesn't support PQ but does support x25519 and TLS 1.3
+                 */
+                EXPECT_SUCCESS(s2n_config_set_cipher_preferences(config, "20240503"));
 
                 struct s2n_connection *client_conn = NULL;
                 EXPECT_NOT_NULL(client_conn = s2n_connection_new(S2N_CLIENT));