openbsd/src/regress/lib/libssl/interop/cert, branch OPENBSD_7_3 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_3 2023-02-01T14:39:09+00:00 Retire OpenSSL 1.0.2 interop 2023-02-01T14:39:09+00:00 tb 2023-02-01T14:39:09+00:00 urn:sha1:17e85e0d750477ecd6d94c4da3d089193c536e8f Now that the OpenSSL 1.0.2 port is gone, there's no need to keep the interop tests anymore. anton's and bluhm's regress tests will switch to testing interoperability with OpenSSL 3.0. Add openssl 3.0 interop tests 2023-01-27T08:28:36+00:00 tb 2023-01-27T08:28:36+00:00 urn:sha1:971c759a469620704a18f7c93e7d71fbae75e7c2 The plan is to retire the 1.0.2 interop tests soon so as to be able to drop the dead and dangerous OpenSSL 1.0.2 port. The cert part is extremely slow on arm64: the whole interop test on an m1 is about 10x slower (~45 min!) than on a modern amd64 laptop, so people running regress may want to wait a bit with adding OpenSSL 3 to their test boxes until this is sorted out. Make Bob happy. 2021-09-03T11:58:24+00:00 bluhm 2021-09-03T11:58:24+00:00 urn:sha1:c49f54bd21b91f7bf439543ffad1572e290083d4 Remove echo headlines. 2020-12-17T00:51:12+00:00 bluhm 2020-12-17T00:51:12+00:00 urn:sha1:c7cbfcf2a0ad5dc204129e5fbf99dd57cc33e72a 1) Move the interop tests to the end so we see tlsfuzzer first 2020-09-21T15:13:24+00:00 beck 2020-09-21T15:13:24+00:00 urn:sha1:9d558960cf920187dcf488f05a3decde546bbddc 2) Reorder the interop tests so the really slow "cert" test is at the end 3) Change the cert tests to use REGRESS_SLOW_TARGETS when testing combination of client and server that does not involve libressl. This way we can skip testing openssl to openssl11 when running these manually by setting REGRESS_SKIP_SLOW to "yet" in mk.conf ok jsing@ Test that all supported TLS ciphers actually work. Establish 2019-02-21T23:06:33+00:00 bluhm 2019-02-21T23:06:33+00:00 urn:sha1:375349e3dab4ad23aaba1771a89b29b9525e2c0c connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. Fix a race in libssl interop regress. The success messages from 2018-11-11T07:39:35+00:00 bluhm 2018-11-11T07:39:35+00:00 urn:sha1:fe775c947ba8aa3dd6c7ed44eb81044fef969911 the server child could be delayed. In this case wait a second and check again. Reorganize libssl interop tests. Move netcat tests into separate 2018-11-11T00:15:04+00:00 bluhm 2018-11-11T00:15:04+00:00 urn:sha1:50da4d90eb521ba89a43af23da2b26ada631c4d1 directory. Keep all log files for easier debugging. Name regress target names consistently. The cert subdir is testing all combinations of certificate validation. 2018-11-09T06:30:41+00:00 bluhm 2018-11-09T06:30:41+00:00 urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases.