openbsd/src/regress/lib/libssl/interop/openssl, branch OPENBSD_7_1_BASEA mirror of https://github.com/libressl/openbsd.git
https://git.lua4.win/openbsd/atom?h=OPENBSD_7_1_BASE2021-12-02T17:10:53+00:00Tell testers which packages to install right away (and why)2021-12-02T17:10:53+00:00kn2021-12-02T17:10:53+00:00urn:sha1:5f76eb00e8dae262a9b0c52bae0d3b6fe1ed6ce0
Other regress tests do it differently; just fix/thouch those that did not
mention any package name at all.
This helps grepping logs for SKIPPED to find instructions for the next run.
Remove echo headlines.2020-12-17T00:51:12+00:00bluhm2020-12-17T00:51:12+00:00urn:sha1:c7cbfcf2a0ad5dc204129e5fbf99dd57cc33e72aDo not fail with obscure error messages on 'make'2020-10-29T06:05:12+00:00tb2020-10-29T06:05:12+00:00urn:sha1:1822c50c29255a6f1fb43434b5b68915ea021a20
Fix some tests that fail with obscure error messages on 'make' if the
required package (either version of OpenSSL or Botan 2) isn't installed.
This can be avoided by doing 'make regress' instead. I'll try to adjust
my finger memory for the many tests outside the LibreSSL tree that have
the same "problem". The fix here is unintrusive and I've been wasting
enough time with this to want to change it.
ok bluhm
Reorganize libssl interop tests. Move netcat tests into separate2018-11-11T00:15:04+00:00bluhm2018-11-11T00:15:04+00:00urn:sha1:50da4d90eb521ba89a43af23da2b26ada631c4d1
directory. Keep all log files for easier debugging. Name regress
target names consistently.
Regress client and server can do session reuse now. Test this with2018-11-10T08:33:45+00:00bluhm2018-11-10T08:33:45+00:00urn:sha1:6bd0566375713b872fa7b3055181d18de32ba11b
all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It
is currently disabled for TLS 1.3 as this needs more setup.
The cert subdir is testing all combinations of certificate validation.2018-11-09T06:30:41+00:00bluhm2018-11-09T06:30:41+00:00urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca
Having the three libraries, client and server certificates, missing
or invalid CA or certificates, and enforcing peer certificate results
in 1944 new test cases.
Add a self test for each SSL library by connecting client with2018-11-07T20:46:28+00:00bluhm2018-11-07T20:46:28+00:00urn:sha1:66e6452e3c0d468ff4c14e29943eaf35f06862fe
server. Check that the highest available TLS version is selected.
LibreSSL TLS 1.3 check is disabled until the feature becomes
available.
Print SSLeay, OpenSSL, and LibreSSL version strings. Make client2018-11-07T06:29:26+00:00bluhm2018-11-07T06:29:26+00:00urn:sha1:82e426606d31d6e2709a9ffcc5b7635d463a7c49
and server compile with OpenSSL 1.1. Check runtime version string
of SSL library.
Test TLS interoperability between LibreSSL and OpenSSL.2018-11-07T01:08:49+00:00bluhm2018-11-07T01:08:49+00:00urn:sha1:be03b61c1b8f59ccdd34dbe5f6c6b30de697d28b
Implement simple SSL client and server in C. Create four binaries
by linking them with LibreSSL or OpenSSL. This way API compatibility
is tested. Connect and accept with netcat to test protocol
compatibility with libtls.
Currently OpenSSL 1.0.2p from ports is used. Plan is to move to
OpenSSL 1.1 and and test TLS 1.3.
idea from beck@; help from jsing@