openbsd/src/regress/lib/libssl/dtls, branch OPENBSD_7_0_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_0_BASE 2021-06-19T18:28:51+00:00 zap trailing whitespace 2021-06-19T18:28:51+00:00 tb 2021-06-19T18:28:51+00:00 urn:sha1:3dff8b873ade1177bb431599f1abd7bcf7a54330 Add DTLS test cases that use non-zero initial epochs. 2021-06-19T17:11:34+00:00 jsing 2021-06-19T17:11:34+00:00 urn:sha1:492739de48b5f88922597744dbedc8e7b0b5c386 In particular, test handling of 0xfffe and 0xffff - the latter results in wrapping to zero for the next epoch. One of these tests triggers a known bug in libssl, which will be fixed following this commit. Add more complex DTLS tests for delay/reordering. 2021-06-19T16:29:51+00:00 jsing 2021-06-19T16:29:51+00:00 urn:sha1:21f2881bcbde69800c9bdf12b8cbf600540e04b0 These tests exercise the various queues and delayed processing that exists in the DTLS code. Expand comment that details why two DTLS tests currently fail. 2021-06-19T15:52:41+00:00 jsing 2021-06-19T15:52:41+00:00 urn:sha1:80619541756202355d5003f68af0c6603b651bb5 Two tests currently fail (and are disabled) due to a flaw in the DTLSv1.0 specification - this flaw was addressed in DTLSv1.2, however our DTLS server code still needs to support the fix. Quoting RFC 6347 section 4.2.4: "This requirement applies to DTLS 1.0 as well, and though not explicit in [DTLS1], it was always required for the state machine to function correctly." In otherwords, both the original DTLS implementation and the DTLSv1.0 specification have a broken state machine, resulting in possible dead lock. Provide the ability to delay/reorder DTLS packets. 2021-06-19T15:33:37+00:00 jsing 2021-06-19T15:33:37+00:00 urn:sha1:03e245321646ba94158722be283f080d7603563a Add a test that delays the client CCS, resulting in it arriving after the client Finished message. Remove SSL_CTX_set_read_ahead() calls - it is now the default for DTLS. 2021-06-18T18:26:38+00:00 jsing 2021-06-18T18:26:38+00:00 urn:sha1:776b08f0c2202d8c1d0802fa6b82cd98ea3ed941 Use limits.h instead of sys/limits.h in dtlstest.c for portable 2021-05-03T23:44:05+00:00 inoguchi 2021-05-03T23:44:05+00:00 urn:sha1:dbfae6d3cbd0e5f9283cc220c94c4f3d379f3c91 discussed and input from jsing@ Enable auto DHE and disable session tickets for some tests. 2021-02-07T14:52:17+00:00 jsing 2021-02-07T14:52:17+00:00 urn:sha1:b4b8a48cdfd397e4350388fe0e6ff7928e35242f This allows us to drop the server messages that we intend on dropping. Only hexdump packets/messages on higher debug levels. 2021-02-06T07:34:34+00:00 jsing 2021-02-06T07:34:34+00:00 urn:sha1:072d1a100dd190ffde85594f10a21fd26b1b6854 Test reads and writes between the client and server. 2021-02-06T07:33:27+00:00 jsing 2021-02-06T07:33:27+00:00 urn:sha1:c35cb6ba121851f99e93e656d387e0bb9d36c7e6