A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_4 2023-07-15T19:32:54+00:00 2023-07-15T19:32:54+00:00 tb 2023-07-15T19:32:54+00:00 urn:sha1:844b33e0d2a17767edb81a02b9f4f03d28fc3ad3 2023-07-12T07:03:24+00:00 tb 2023-07-12T07:03:24+00:00 urn:sha1:ef8535dfb88d26c0fa03b0d83c2108a25692f974 2023-07-02T17:21:33+00:00 beck 2023-07-02T17:21:33+00:00 urn:sha1:4edd92a57f3a74829fe519f35b5c7c79e03ce0b0 Their time has long since past, and they should not be used. This change restricts ssl to versions 1.2 and 1.3, and changes the regression tests to understand we no longer speak the legacy protocols. For the moment the magical "golden" byte for byte comparison tests of raw handshake values are disabled util jsing fixes them. ok jsing@ tb@ 2022-11-05T21:58:24+00:00 jsing 2022-11-05T21:58:24+00:00 urn:sha1:629d583d60b49ad21dc4d0546dcfc672db3e638c 2022-10-20T07:38:05+00:00 tb 2022-10-20T07:38:05+00:00 urn:sha1:ec56366d7977d17889515b1e1e7bb746f2aa47c8 2022-08-27T09:23:17+00:00 jsing 2022-08-27T09:23:17+00:00 urn:sha1:4a0ae31bdb06b27f78451c8c1db7721548be311e 2022-01-05T09:59:39+00:00 jsing 2022-01-05T09:59:39+00:00 urn:sha1:e2cb230afcf1e1e09acf7e7bfd7355706130d384 This will largely test curly and inconsistent APIs that are not covered by other regress tests. Currently, this tests the wonder that is SSL_get_peer_cert_chain(). 2021-10-23T14:34:10+00:00 jsing 2021-10-23T14:34:10+00:00 urn:sha1:8df330f8ab4894190007c25d1efe71e7f5c58383 This currently exercises various combinations of TLS versions and their associated key exchange mechanisms. Note that this currently fails for TLSv1.0/TLSv1.1 with RSA KEX (to be fixed shortly). Over time all of the ssl regress should be moved into the dtls and tls regress tests. 2021-08-30T17:34:32+00:00 tb 2021-08-30T17:34:32+00:00 urn:sha1:6393c4c396b73d9fc525e433ed407225e44a7d4c 2021-08-30T17:34:02+00:00 tb 2021-08-30T17:34:02+00:00 urn:sha1:e501ef18aa9f692de97c6b92c6bfabf63c669322