crypto/tls: remove RSA KEX ciphers from the default list

[gostls13.git] / src / crypto / tls / tls_test.go

diff --git a/src/crypto/tls/tls_test.go b/src/crypto/tls/tls_test.go
index 16f655dd93dbebcca445931aa1e4b64e5eb39b8b..5b09e535247c296f1ba3df0c960fb3114d350951 100644 (file)
--- a/src/crypto/tls/tls_test.go
+++ b/src/crypto/tls/tls_test.go
@@ -1288,7 +1288,8 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
                        SignatureSchemes:  []SignatureScheme{PKCS1WithSHA1},
                        SupportedVersions: []uint16{VersionTLS13, VersionTLS12},
                        config: &Config{
-                               MaxVersion: VersionTLS12,
+                               CipherSuites: []uint16{TLS_RSA_WITH_AES_128_GCM_SHA256},
+                               MaxVersion:   VersionTLS12,
                        },
                }, ""}, // Check that mutual version selection works.
 
@@ -1385,6 +1386,9 @@ func TestClientHelloInfo_SupportsCertificate(t *testing.T) {
                {rsaCert, &ClientHelloInfo{
                        CipherSuites:      []uint16{TLS_RSA_WITH_AES_128_GCM_SHA256},
                        SupportedVersions: []uint16{VersionTLS12},
+                       config: &Config{
+                               CipherSuites: []uint16{TLS_RSA_WITH_AES_128_GCM_SHA256},
+                       },
                }, ""}, // static RSA fallback
        }
        for i, tt := range tests {