openbsd/src/regress/lib/libssl/client, branch libressl-v3.1.3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v3.1.3 2020-04-06T16:53:09+00:00 Minor code improvements. 2020-04-06T16:53:09+00:00 jsing 2020-04-06T16:53:09+00:00 urn:sha1:dcf3abfaf99f1ee2dd47359a1944c479eaddf9bd Add tests that cover TLSv1.2 and disable those that trigger TLSv1.3. 2020-04-06T16:52:26+00:00 jsing 2020-04-06T16:52:26+00:00 urn:sha1:32add134e786bd06a44666190d83a55085bd24a8 This allows the test to pass again. Zero the client random field in the TLSv1.2 golden value. 2020-04-06T16:50:27+00:00 jsing 2020-04-06T16:50:27+00:00 urn:sha1:be9d7e67c4931d1e39f372a02d1cd242ac0c81a9 Improve comparision with test data. 2020-04-06T16:49:42+00:00 jsing 2020-04-06T16:49:42+00:00 urn:sha1:8eff3ba970ca459d172046c749e4763f0dc50174 First check the client random against the zeroed value, then zero the client random in the client hello, before comparing with the golden value. This makes failures more obvious and the test code more readable. Dump the test data when the lengths differ in order to aid debugging. 2020-04-06T16:45:50+00:00 jsing 2020-04-06T16:45:50+00:00 urn:sha1:ff51012cdb035df195da4b0adb5d561d6827be09 Use errx() if we fail to build the client hello. 2020-04-06T16:44:15+00:00 jsing 2020-04-06T16:44:15+00:00 urn:sha1:bbd3055db371e102d601fe2187cf1b66bdbbdd76 Nuke trailing whitespace that is annoying before changing things in here 2019-11-26T18:21:50+00:00 beck 2019-11-26T18:21:50+00:00 urn:sha1:349a283c7b3697fdbf9caeff84b857f04a5483f4 Remove SHA224 based sigalgs from use in TLS 1.2 as SHA224 is deprecated. 2019-01-24T00:07:58+00:00 beck 2019-01-24T00:07:58+00:00 urn:sha1:0c4d3f4e4b1febe6578a3147f00c5604cbbba167 Remove GOST based sigalgs from TLS 1.2 since they don't work with TLS 1.2. ok jsing@ Modify sigalgs extension processing to accomodate TLS 1.3. 2019-01-23T18:39:28+00:00 beck 2019-01-23T18:39:28+00:00 urn:sha1:5b044ab96482aee07d5182930013d4e606d4740d - Make a separate sigalgs list for TLS 1.3 including only modern algorithm choices which we use when the handshake will not negotiate TLS 1.2. - Modify the legacy sigalgs for TLS 1.2 to include the RSA PSS algorithms as mandated by RFC8446 when the handshake will permit negotiation of TLS 1.2 from a 1.3 handshake. ok jsing@ tb@ revert previous, accidentally contained another diff in addition 2019-01-23T18:24:40+00:00 beck 2019-01-23T18:24:40+00:00 urn:sha1:9a6a5e403c8b66eb5bbc3532a5f1b5e325b172c1 to the one I intended to commit