openbsd/src/regress/lib/libssl/interop/README, branch OPENBSD_7_1_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_1_BASE 2019-02-21T23:06:33+00:00 Test that all supported TLS ciphers actually work. Establish 2019-02-21T23:06:33+00:00 bluhm 2019-02-21T23:06:33+00:00 urn:sha1:375349e3dab4ad23aaba1771a89b29b9525e2c0c connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. Reorganize libssl interop tests. Move netcat tests into separate 2018-11-11T00:15:04+00:00 bluhm 2018-11-11T00:15:04+00:00 urn:sha1:50da4d90eb521ba89a43af23da2b26ada631c4d1 directory. Keep all log files for easier debugging. Name regress target names consistently. The cert subdir is testing all combinations of certificate validation. 2018-11-09T06:30:41+00:00 bluhm 2018-11-09T06:30:41+00:00 urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. Add a self test for each SSL library by connecting client with 2018-11-07T20:46:28+00:00 bluhm 2018-11-07T20:46:28+00:00 urn:sha1:66e6452e3c0d468ff4c14e29943eaf35f06862fe server. Check that the highest available TLS version is selected. LibreSSL TLS 1.3 check is disabled until the feature becomes available. Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically 2018-11-07T19:09:01+00:00 bluhm 2018-11-07T19:09:01+00:00 urn:sha1:8f0e5908a3eda97ad8aa14cba6eae080ee759006 when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port Test TLS interoperability between LibreSSL and OpenSSL. 2018-11-07T01:08:49+00:00 bluhm 2018-11-07T01:08:49+00:00 urn:sha1:be03b61c1b8f59ccdd34dbe5f6c6b30de697d28b Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@