openbsd/src/regress/lib/libssl/interop, branch OPENBSD_6_5 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_5 2019-03-28T22:24:13+00:00 Enable GOST cipher selection test after libssl has been fixed. 2019-03-28T22:24:13+00:00 bluhm 2019-03-28T22:24:13+00:00 urn:sha1:c9f5a90a62bcbef702ae80d4c3d2063e5bfab8f7 Fix typo in usage and comment. 2019-03-21T17:52:26+00:00 bluhm 2019-03-21T17:52:26+00:00 urn:sha1:b45cb195c7a0d58f9ee417f6a2035faec7d3a555 Test that all supported TLS ciphers actually work. Establish 2019-02-21T23:06:33+00:00 bluhm 2019-02-21T23:06:33+00:00 urn:sha1:375349e3dab4ad23aaba1771a89b29b9525e2c0c connections between client and server implemented with LibreSSL or OpenSSL with a fixed cipher on each side. Check the used cipher in the session print out. getopt(3) returns int, not char. Fix type of ch variable to prevent 2019-02-11T12:22:44+00:00 bluhm 2019-02-11T12:22:44+00:00 urn:sha1:88618333f84d8a2726a86ece227e023659dbf0cc sign error during arm regress. Fix a race in libssl interop regress. The success messages from 2018-11-11T07:39:35+00:00 bluhm 2018-11-11T07:39:35+00:00 urn:sha1:fe775c947ba8aa3dd6c7ed44eb81044fef969911 the server child could be delayed. In this case wait a second and check again. Reorganize libssl interop tests. Move netcat tests into separate 2018-11-11T00:15:04+00:00 bluhm 2018-11-11T00:15:04+00:00 urn:sha1:50da4d90eb521ba89a43af23da2b26ada631c4d1 directory. Keep all log files for easier debugging. Name regress target names consistently. Regress client and server can do session reuse now. Test this with 2018-11-10T08:33:45+00:00 bluhm 2018-11-10T08:33:45+00:00 urn:sha1:6bd0566375713b872fa7b3055181d18de32ba11b all combinations of LibreSSL, OpenSSL 1.0.2, and OpenSSL 1.1. It is currently disabled for TLS 1.3 as this needs more setup. The cert subdir is testing all combinations of certificate validation. 2018-11-09T06:30:41+00:00 bluhm 2018-11-09T06:30:41+00:00 urn:sha1:e3076365506f38e78df5fe822fa92f5279cc68ca Having the three libraries, client and server certificates, missing or invalid CA or certificates, and enforcing peer certificate results in 1944 new test cases. Add a self test for each SSL library by connecting client with 2018-11-07T20:46:28+00:00 bluhm 2018-11-07T20:46:28+00:00 urn:sha1:66e6452e3c0d468ff4c14e29943eaf35f06862fe server. Check that the highest available TLS version is selected. LibreSSL TLS 1.3 check is disabled until the feature becomes available. Add interop test with OpenSSL 1.1. TLS 1.3 should be used automatically 2018-11-07T19:09:01+00:00 bluhm 2018-11-07T19:09:01+00:00 urn:sha1:8f0e5908a3eda97ad8aa14cba6eae080ee759006 when it becomes available in LibreSSL. thanks to sthen@ for the new OpenSSL port