Description: Use cipher security level 0 in the tests.
Debian-Bug: https://bugs.debian.org/906981
Forwarded: not-yet
Author: Peter Pentchev <roam@ringlet.net>
Last-Update: 2018-08-24

--- a/tests/recipes/010_require_cert
+++ b/tests/recipes/010_require_cert
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/011_verify_peer
+++ b/tests/recipes/011_verify_peer
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/012_verify_chain
+++ b/tests/recipes/012_verify_chain
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/013_CRL_file
+++ b/tests/recipes/013_CRL_file
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/015_p12_cert
+++ b/tests/recipes/015_p12_cert
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/020_IPv6
+++ b/tests/recipes/020_IPv6
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/021_FIPS
+++ b/tests/recipes/021_FIPS
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
   fips = yes
 
   [client]
--- a/tests/recipes/022_bind
+++ b/tests/recipes/022_bind
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/030_simple_execute
+++ b/tests/recipes/030_simple_execute
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/031_redirect
+++ b/tests/recipes/031_redirect
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_1]
   client = yes
--- a/tests/recipes/032_no_redirect
+++ b/tests/recipes/032_no_redirect
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_1]
   client = yes
--- a/tests/recipes/033_redirect_exec
+++ b/tests/recipes/033_redirect_exec
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_1]
   client = yes
--- a/tests/recipes/034_no_redirect_exec
+++ b/tests/recipes/034_no_redirect_exec
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_1]
   client = yes
--- a/tests/recipes/035_SNI
+++ b/tests/recipes/035_SNI
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/036_no_SNI
+++ b/tests/recipes/036_no_SNI
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/037_failover_prio1
+++ b/tests/recipes/037_failover_prio1
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/038_failover_prio2
+++ b/tests/recipes/038_failover_prio2
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/039_failover_rr
+++ b/tests/recipes/039_failover_rr
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/040_reload
+++ b/tests/recipes/040_reload
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_1]
   client = yes
@@ -26,6 +27,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client_2]
   client = yes
--- a/tests/recipes/041_exec_connect
+++ b/tests/recipes/041_exec_connect
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/042_inetd
+++ b/tests/recipes/042_inetd
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [server]
   accept = 127.0.0.1:${https1}
@@ -21,6 +22,7 @@
   debug = debug
   syslog = no
   output = ${result_path}/stunnel_0.log
+  ciphers = DEFAULT@SECLEVEL=1
   service = inetd client
   client = yes
   connect = 127.0.0.1:${https1}
--- a/tests/recipes/043_session_delay
+++ b/tests/recipes/043_session_delay
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/044_session_nodelay
+++ b/tests/recipes/044_session_nodelay
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/110_failure_require_cert
+++ b/tests/recipes/110_failure_require_cert
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/111_failure_verify_peer
+++ b/tests/recipes/111_failure_verify_peer
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/112_failure_verify_chain
+++ b/tests/recipes/112_failure_verify_chain
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/113_failure_CRL_file
+++ b/tests/recipes/113_failure_CRL_file
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/120_failure_no_cert
+++ b/tests/recipes/120_failure_no_cert
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes
--- a/tests/recipes/121_failure_wrong_config
+++ b/tests/recipes/121_failure_wrong_config
@@ -7,6 +7,7 @@
   syslog = no
   pid = ${result_path}/stunnel.pid
   output = ${result_path}/stunnel.log
+  ciphers = DEFAULT@SECLEVEL=1
 
   [client]
   client = yes