openbsd/src/regress/lib/libssl/interop/server.c, branch OPENBSD_7_9_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_7_9_BASE 2023-02-01T14:39:09+00:00 Retire OpenSSL 1.0.2 interop 2023-02-01T14:39:09+00:00 tb 2023-02-01T14:39:09+00:00 urn:sha1:17e85e0d750477ecd6d94c4da3d089193c536e8f Now that the OpenSSL 1.0.2 port is gone, there's no need to keep the interop tests anymore. anton's and bluhm's regress tests will switch to testing interoperability with OpenSSL 3.0. Only run tests against ciphers supported by the method. 2022-07-07T13:12:57+00:00 tb 2022-07-07T13:12:57+00:00 urn:sha1:6c30e945e931211223b0bbf8f86a8754ce7d65d7 alarm(3) cannot fail, remove error handling. 2021-07-06T11:50:34+00:00 bluhm 2021-07-06T11:50:34+00:00 urn:sha1:79ad01e78891813d44a87b6399284a5fdf74f0ee suggested by millert@ Connect a client to a server. Both can be current libressl, or 2020-09-14T00:51:04+00:00 bluhm 2020-09-14T00:51:04+00:00 urn:sha1:407ed00262824449401bb81ab8981bc63ea02280 openssl 1.0.2, or openssl 1.1. Pin client or server to a fixed TLS version number. Incompatible versions must fail. Check that client and server have used correct version by grepping in their session print out. Fix typo in usage and comment. 2019-03-21T17:52:26+00:00 bluhm 2019-03-21T17:52:26+00:00 urn:sha1:b45cb195c7a0d58f9ee417f6a2035faec7d3a555 Test that all supported TLS ciphers actually work. Establish 2019-02-21T23:06:33+00:00 bluhm 2019-02-21T23:06:33+00:00 urn:sha1:375349e3dab4ad23aaba1771a89b29b9525e2c0c connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. getopt(3) returns int, not char. Fix type of ch variable to prevent 2019-02-11T12:22:44+00:00 bluhm 2019-02-11T12:22:44+00:00 urn:sha1:88618333f84d8a2726a86ece227e023659dbf0cc sign error during arm regress. Regress client and server can do session reuse now. Test this with 2018-11-10T08:33:45+00:00 bluhm 2018-11-10T08:33:45+00:00 urn:sha1:6bd0566375713b872fa7b3055181d18de32ba11b all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup. The cert subdir is testing all combinations of certificate validation. 2018-11-09T06:30:41+00:00 bluhm 2018-11-09T06:30:41+00:00 urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically 2018-11-07T19:09:01+00:00 bluhm 2018-11-07T19:09:01+00:00 urn:sha1:8f0e5908a3eda97ad8aa14cba6eae080ee759006 when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port