openbsd/src/regress/lib/libssl/interop/client.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2020-09-14T00:51:04+00:00 Connect a client to a server. Both can be current libressl, or 2020-09-14T00:51:04+00:00 bluhm 2020-09-14T00:51:04+00:00 urn:sha1:407ed00262824449401bb81ab8981bc63ea02280 openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out. Enable cert and cipher interop tests. cert just works. cipher has 2020-09-11T22:48:00+00:00 bluhm 2020-09-11T22:48:00+00:00 urn:sha1:66b3b0fa0e26b882333bdd906d8811b1f4094144 been fixed to work with libressl TLS 1.3. Both libressl and openssl11 replace obsolete TLS 1.2 ciphers with AEAD-AES256-GCM-SHA384 or TLS_AES_256_GCM_SHA384 in TLS 1.3 respectively. The test expects that now. Currently GOST does not work with libressl and TLS 1.3 and is disabled. Fix typo in usage and comment. 2019-03-21T17:52:26+00:00 bluhm 2019-03-21T17:52:26+00:00 urn:sha1:b45cb195c7a0d58f9ee417f6a2035faec7d3a555 Test that all supported TLS ciphers actually work. Establish 2019-02-21T23:06:33+00:00 bluhm 2019-02-21T23:06:33+00:00 urn:sha1:375349e3dab4ad23aaba1771a89b29b9525e2c0c connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. getopt(3) returns int, not char. Fix type of ch variable to prevent 2019-02-11T12:22:44+00:00 bluhm 2019-02-11T12:22:44+00:00 urn:sha1:88618333f84d8a2726a86ece227e023659dbf0cc sign error during arm regress. Regress client and server can do session reuse now. Test this with 2018-11-10T08:33:45+00:00 bluhm 2018-11-10T08:33:45+00:00 urn:sha1:6bd0566375713b872fa7b3055181d18de32ba11b all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup. The cert subdir is testing all combinations of certificate validation. 2018-11-09T06:30:41+00:00 bluhm 2018-11-09T06:30:41+00:00 urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically 2018-11-07T19:09:01+00:00 bluhm 2018-11-07T19:09:01+00:00 urn:sha1:8f0e5908a3eda97ad8aa14cba6eae080ee759006 when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port Print SSLeay, OpenSSL, and LibreSSL version strings. Make client 2018-11-07T06:29:26+00:00 bluhm 2018-11-07T06:29:26+00:00 urn:sha1:82e426606d31d6e2709a9ffcc5b7635d463a7c49 and server compile with OpenSSL 1.1. Check runtime version string of SSL library. Test TLS interoperability between LibreSSL and OpenSSL. 2018-11-07T01:08:49+00:00 bluhm 2018-11-07T01:08:49+00:00 urn:sha1:be03b61c1b8f59ccdd34dbe5f6c6b30de697d28b Implement simple SSL client and server in C. Create four binaries by linking them with LibreSSL or OpenSSL. This way API compatibility is tested. Connect and accept with netcat to test protocol compatibility with libtls. Currently OpenSSL 1.0.2p from ports is used. Plan is to move to OpenSSL 1.1 and and test TLS 1.3. idea from beck@; help from jsing@